The following diagram illustrates a basic Cisco NAC architecture.
Basic Cisco NAC architecture
The OfficeScan client in this figure has a CTA installation and is only able to access the network through a Network Access Device that supports Cisco NAC. The Network Access Device is between the client and the other Cisco NAC components.
The architecture of your network may differ based on the presence of proxy servers, routers, or firewalls.