https://live.paloaltonetworks.com/t5/globalprotect-discussions/windows-11-22h2-device-guard-radius-ms-chapv2/m-p/515647#M3187 <P>Hi,</P> <P>&nbsp;</P> <P>The newly released Windows client update 22H2 enables device guard by default which will block MS-CHAPv2 for radius authentication use.</P> <P>We currently use this for our GP configuration since radius auth supports users changing expired passwords via the GP client.</P> <P>I had a look at the other available radius options and it seems EAP-TTLS/PAP is the only alternative.</P> <P>Has anyone successfully configured this using Microsoft's NPS server.</P> <P>&nbsp;</P> Wed, 21 Sep 2022 21:08:21 GMT ITforacompany 2022-09-21T21:08:21Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/windows-11-22h2-device-guard-radius-ms-chapv2/m-p/515647#M3187 <P>Hi,</P> <P>&nbsp;</P> <P>The newly released Windows client update 22H2 enables device guard by default which will block MS-CHAPv2 for radius authentication use.</P> <P>We currently use this for our GP configuration since radius auth supports users changing expired passwords via the GP client.</P> <P>I had a look at the other available radius options and it seems EAP-TTLS/PAP is the only alternative.</P> <P>Has anyone successfully configured this using Microsoft's NPS server.</P> <P>&nbsp;</P> Wed, 21 Sep 2022 21:08:21 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/windows-11-22h2-device-guard-radius-ms-chapv2/m-p/515647#M3187 ITforacompany 2022-09-21T21:08:21Z