A company requires that every laptop connecting to the corporate LAN have an up-to-date antivirus signature and the latest OS patches. Devices that fail these checks must be automatically placed on a restricted remediation segment where they can only reach the patch and update servers. Which security solution provides this capability?