I just read a blog post here at McAfee with regard to the history of ePO. I noticed that Network Access Control (NAC) was mentioned as a end-point product that can be integrated into an ePO solution. If this is true, has anyone in these forums implmented NAC with ePO and can it be configured to prevent conecting to the network until the latest DAT version and endpoint product updates have been successfully installed on the client from the ePO server?
ForeScout's NAC product integrates with ePO and supports exactly what you are asking for. For more information, see this: