Protect against security risks and NPS connection failures that affect RADIUS server environments

This post is a must-read for those working with Remote Authentication Dial-In User Service (RADIUS) protocol. The article sheds light on the security risks in User Datagram Protocol or UDP-based RADIUS traffic over the internet that makes data packets vulnerable to forgery and tampering during transit. The problem arises due to MD5 collision issues, and companies dealing with RADIUS server environments are at high risk.

While Windows updates support the Message-Authenticator attribute in Access-Request packets from July 9, 2024, RADIUS solution providers or firewalls that don't support this update can cause Network Policy Server (NPS) connection failures. To address this issue and the security risk, the post recommends enabling the Message-Authenticator attribute in Access-Request packets that'll enhance the security of UDP-based RADIUS traffic and prevent NPS connection failures.

The post Protect against security risks and NPS connection failures that affect RADIUS server environments first appeared on M365 Admin.