Wired 802.1x w/ RADIUS and COA

[iunderwood74]

I've got a deployment of remote FortiGate units using 802.1x on its wired ports.  I'm using ClearPass as the RADIUS server and I'm able to allow / deny ports without any difficulty.

What I am unable to find is any documentation on how I can use RADIUS CoA to assign attributes which can affect what the end user is allowed to do under policy.  For instance, I'd like to use the OnGuard Agent to verify current anti-virus and encryption, and be able to affect what is accessible if those checks fail compliance.