This object controls whether Network Admission Control (NAC) with out-of-band processing is enabled for a wireless LAN. When set to true, wireless clients must pass NAC security compliance checks before gaining full network access, as the controller separates authentication from data traffic forwarding. An operator would enable this feature when implementing strict endpoint compliance policies, such as requiring antivirus software or updated operating systems before allowing device connections.