An IT administrator notices that a client endpoint has failed a health check and wants...

In OnGuard, you can configure Post-Auth Actions . When a device fails compliance, simply telling the user is often not enough. By choosing an action to "Restart the session," ClearPass sends a RADIUS CoA (Change of Authorization) to the switch or controller, which bounces the user's connection. This forces the device to re-authenticate, at which point the new "Unhealthy" status will trigger a restricted or quarantine policy.