When you put a VTY ACL on all the routers and switches in an environment, always be sure to include the IP addresses of the NAC appliances in that ACL.
The R&S boys did a great job of locking out all the NAC appliances over the weekend. If we were in enforcement mode, we'd be having "issues" right about now.
:developers: