1. A method for network access control, the method comprising: sending a request for audit data to an agent on the device; receiving audit data from the agent; auditing the device in accordance with a security policy based at least in part on the audit data; sending a RADIUS response to the access point that reconfigures the access point to allow access to a less-restricted subset of the network in response to the device meeting requirements of the security policy used in the audit.