Security

last person joined: 14 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass decapsulate EAP and proxy only MSCHAP-V2

This thread has been viewed 1 times

  • 1.  Clearpass decapsulate EAP and proxy only MSCHAP-V2

    Posted Oct 29, 2019 11:00 AM

    Hi,

     

    I have a tricky problem with the VIA VPN client. I need two-factor validation for the users, and this is handled by a system that takes control of parts of the Microsoft NPS server.

    However the VIA client can only support EAP-MSCHAP-V2 and this particular two-factor providor can only support MSCHAP-V2 without EAP.

    Question is, would it be possible to use the Clearpass in the middle as a RADIUS proxy, and have it decapsulate the EAP part, and only proxy the MSCHAP-V2 part to the NPS?

     

    Sorry for the confusing description of the problem.

    Hope someone can help.

    Thanks.