we are using clear pass to do the authentication, but I know that on the campus controller you have to set the switch to allow downloaded roles/ACL and I do not see that anywhere on the virtual controller. is that just the default on the virtual controllers?