How do you decide which auth protocol to use on a VPN client?

Virtual Private Networking in Microsoft Windows supports several authentication protocols including EAP-TLS, mS-CHAPv2, and others. Which VPN authentication protocol should you use in which circumstance? Here’s a quick guide:

Use EAP-TLS if your VPN clients need to use smart cards or if your enterprise already has a CA in place that issues user certificates.

Use MS-CHAPv2 if you need to use a password-based authentication method, and make sure you force the use of strong passwords using Group Policy.

Use less secure auth protocols like MS-CHAP, CHAP and PAP only if you absolutely must for backward compatibility reasons.

Article written by MyComputerAid.com