A logical portion of the network where client computers that either do not meet health policy or are not capable of asserting that they meet health policy are placed. Computers in the restricted network cannot initiate communication to resources in the secure network.