- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-29-2018 09:51 AM - edited 02-21-2020 10:44 AM
Hi,
Is it possible to make authentication with both user and computer certificates with a Windows Network Policy Server?
Thanks.
Solved! Go to Solution.
- Labels:
-
Other NAC
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-30-2018 06:11 AM
Yes, you can use the Cisco Network Access Manager (NAM) to authenticate to you NPS server, it basically replaces the windows native supplicant and supports several authentication modes.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-29-2018 01:20 PM
It really depends on the client's supplicant, the Windows native supplicant will not handle both user and machine authentication, it is one or the other.
If you use Cisco AnyConnect as a supplicant you can do EAP chaining which allows authentication of both user and machine at the same time. However I can't say for sure if the AnyConnect supplicant will do EAP chaining with a Windows NPS.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-29-2018 10:00 PM
Thanks for your reply.
So you can use cisco any connect as your client and authenticate with the Windows NPS?
I am assuming that you will use the cisco network manager, right?
Thanks.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-30-2018 06:11 AM
Yes, you can use the Cisco Network Access Manager (NAM) to authenticate to you NPS server, it basically replaces the windows native supplicant and supports several authentication modes.
