Client machine has been configured for updates from SUS server and for Mcafee AV Dat updates from internal server when connected on the internal LAN.
User connects from home,
SCV tests client for existence of a new XP OS hot fix and/or mcafee anti-virus definition version.
If client fails test, how/where do I specify that this "nonsecurely configured client" (I've heard this described that the unsecured client is in "Network Quarantine") is still allowed to connect to internal (not DMZ) SUS server or AVdef repository to remediate client so that it will be able to reconnect as securely configured client and gain access to the entire internal network?