Page 221 on the study guide.
slide shows that a cert is used to authenticate the server.
And then we have the following text.
Using encapsulated EAP methods, the client establishes a TLS session first. At this point, the authentication
server uses a digital certificate to authenticate the client.
The study guide is slightly misleading here. That block of text is referring EAP methods more generally. Both PEAP versions supported by fortiOS only require a pki cert to authenticate the server. Microsoft has its own proprietary version of what it calls PEAP (PEAP-EAP-TLS) which requires the installation of a cert on the client, but it is not widely supported and behaves more like the initial iterations of EAP-TLS and not PEAP
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Yorkylad
1 year, 4 months agop3dr01n
1 year, 5 months agoatidd
1 year, 5 months agoDC095
3 months, 3 weeks agokinge2
2 years, 3 months agoafons0
2 years, 6 months ago