Duel: EAP-TLS vs PEAP-MS-CHAPv2 for wifi in NPS's Network Policies.

  • Thread starter Thread starter InfoTechdude
  • Start date Start date
I

InfoTechdude

Guest
Hi,

1443506.jpg

I study the matter for a while and would like to pick your brain on the issue. Both EAP-TLS and PEAP-MS-CHAPv2 are mutual authentication protocols and both use certs. When it comes to Wireless access, Switches and VPN(even RD Gateway) Microsoft recommends PEAP- type authentication method. Yet, I read that for Wireless access it's better to use PEAP-MS-CHAPv2 (this is cert+username/password stuff) method (only server cert needed!).

If I understand correctly both methods are good but EAP-TLS is more complicated (certs/smart cards infra). Which one is better to use then?

Thank you,

Continue reading...
 
Back
Top