In the Java NAC Manager client, you can right-click on a end-system and bring up the extremely handy Configuration Evaluation Tool. Is there a way to get this tool in the ExtremeManagement web interface? It's particularly useful when trying to work out why a client is being rejected, as the reason is only ever "Configured for reject" rather than saying which rule it matched.