IDS/IPS continues to march towards post-connect NAC

Well it looks like Sourcefire is the latest company to recognize that IDS/IPS can be easily re-skinned to be a post-connect NAC product.  With the release of their Enterprise Threat Management strategy as detailed in this article in Search Security, Sourcefire will use their RNA passive vulnerability scanner and Snort based sensors to perform post-connect NAC policy enforcement.  While post-connect NAC is a valuable ability, without pairing it with pre-connect NAC, it just does not feel like a full product.  Could be, we see Sourcefire either partner with a pre-connect NAC company or maybe use some of their now diminished public equity to buy a pre-connect company.  I guess we will wait and see, but I don't think what they have now will be sufficient to make a mark in the crowded NAC market.