Can I "craft" network policy which drops clients to specified Vlan ONLY when both conditions are true: machine certificate exists AND machine is member of specific group
If machine is NOT member of the group (and only certificate exists), then it gets onto different Vlan
Seb