This document describes how Network Endpoint Assessment (NEA) data can be carried under the protection of a Transport Layer Security (TLS) secured tunnel. This document defines NEA transports for TLS- based Extensible Authentication Protocol (EAP) tunnel methods and for TLS used over TCP.