Couple of things:
- if you have a RADIUS server, in most cases it's recommended to terminate on the RADIUS server instead of the controller.
- IAS is very old. You may want to consider moving over to NPS which is the replacement for IAS.
- Since IAS is also no longer supported by Microsoft, you may have issues with newer client operating systems when using authentication methods that require a certificate(s).