IBM Tivoli and Cisco - Manual (Page 88)

70 Building a Network Access Control Solution with IBM Tivoli and Cisco Systems
Small Office Home Office compliance
Policy enforcement can be used to protect corporate networks from
noncompliant and potentially infected small office and home office (SOHO)
users, as shown in Figure 3-12. This will also be the practical deployment option
for clients who are using Port Address Translation to access corporate resources.
Figure 3-12 SOHO compliance
Site-to-Site
VPN Users
Internet
AAA
AAA
SOHO Compliance
(PAT access protection)
Corporate
Headquarters
Data Center
Posture Enforcement
Points
Router
AAA
AAA
Server
VPN