A method of operating a client computer seeking to connect to a managed network via an access point, wherein the access point includes a health policy server, the client computer being configured with a client health enforcement framework comprising a client health access agent adapted to obtain configuration information relating to protective components of the client computer from one or more statement of health agents (216A, 216B, 216C) through a plug in interface, wherein the client computer is configured to provide a statement of health to the health policy server, the health policy server being configured to determine whether the client device is granted access to the managed network based on a health status of the client device, the method comprising: requesting, by a client authentication component on the client computer, authentication with an authentication server external to the managed network; upon successful authentication of the client computer with the authentication server, obtaining (414, 434), by the client authentication component, a security token, the security token indicating that the client computer is authenticated to access the network; formatting, by the client health access agent on the client computer, the statement of health comprising the configuration information obtained from the statement of health agents and the security token, wherein the client health access agent obtains the security token from the authentication component through the plug in interface; providing, by the client health access agent, the statement of health to the health policy server in connection with a request for network access; receiving, by the client health access agent, a statement of health response from the health policy server, wherein the statement of health includes information indicating, for each of the protective components and the authentication component, whether remediation of the respective component is required; if the statement of health response indicates that remediation is required for the authentication component, obtaining, by the client authentication component, challenge information received with the statement of health response, providing, by the client authentication component, the challenge information with an authentication request to the authentication server and, in response to a successful authentication, obtaining, by the authentication component from the authentication server, a security token authenticated with the challenge information; if the statement of health response indicates that remediation is required for one or more components of the protective components of the client computer, remediating, by the client health agents, said one or more protective components; and if the statement of health response contains no indication that remediation is required, obtaining, by the client computer, access to the managed network. requesting, by a client authentication component on the client computer, authentication with an authentication server external to the managed network; upon successful authentication of the client computer with the authentication server, obtaining (414, 434), by the client authentication component, a security token, the security token indicating that the client computer is authenticated to access the network; formatting, by the client health access agent on the client computer, the statement of health comprising the configuration information obtained from the statement of health agents and the security token, wherein the client health access agent obtains the security token from the authentication component through the plug in interface; providing, by the client health access agent, the statement of health to the health policy server in connection with a request for network access; receiving, by the client health access agent, a statement of health response from the health policy server, wherein the statement of health includes information indicating, for each of the protective components and the authentication component, whether remediation of the respective component is required; if the statement of health response indicates that remediation is required for the authentication component, obtaining, by the client authentication component, challenge information received with the statement of health response, providing, by the client authentication component, the challenge information with an authentication request to the authentication server and, in response to a successful authentication, obtaining, by the authentication component from the authentication server, a security token authenticated with the challenge information; if the statement of health response indicates that remediation is required for one or more components of the protective components of the client computer, remediating, by the client health agents, said one or more protective components; and if the statement of health response contains no indication that remediation is required, obtaining, by the client computer, access to the managed network.