How to Identify and Prevent Internal Threats?

For securing internal network, we have to be able to see what are connected to devices in our networks.
Do they make some anomaly traffics?
Do they comply with company regulation?
Is there any vulnerability inside the networks?

How Next-Gen NAC solution to identify and secure the internal network?