Juniper - who built its nac solution using components from its funk acquisition and great SSL VPN product - and promotes open standards and interfaces to any endpoint or network software or equipment - is in my mind the right approach that doesn't force you to get locked in or at the mercy of any specific vendor especially MS and Cisco who are known to shy away from open standards based approaches and instead force proprietary architectures