Symantec and their partner attempted to deploy Symantec Network Control Enforcer 6100 appliances and using 802.1X. At that time many of the devices on the network were not compatible with 802.1X and deployment was stopped. We moved to Symantec DHCP Enforcer software on our Domain controllers. The DHCP enforcer works in tandem with Symantec Endpoint Protection's "host integrity" services for NAC. Worked well for Windows clients - no so much for MacOS, iOS and Android devices. DHCP NAC enforcement has been deprecated. We have stopped NAC in our environment. We are relying on domain authentication and NPS for access to our production networks today. I'm now managing Apple products with CasperSuite MDM from JAMF Software