A company allows employees to connect personal laptops to the corporate network. Security wants to ensure that any device connecting has an updated antivirus signature and current OS patches before being granted access to internal resources. Which enterprise capability best accomplishes this?