NETGEAR FVS336Gv1 - ProSafe Dual WAN Gigabit Firewall Reference Manual page 150

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
Table 7-1 summarizes the authentication protocols and methods that the VPN firewall supports.
Table 7-1.Authentication Protocols and Methods
Authentication
Description (or Subfield and Description)
Protocol or Method
PAP Password Authentication Protocol (PAP) is a simple protocol in which the client sends
a password in clear text.
CHAP Challenge Handshake Authentication Protocol (CHAP) executes a three-way hand-
shake in which the client and server trade challenge messages, each responding with
a hash of the other's challenge message that is calculated using a shared secret
value.
RADIUS A network-validated PAP or CHAP password-based authentication method that func-
tions with Remote Authentication Dial In User Service (RADIUS).
MIAS A network-validated PAP or CHAP password-based authentication method that func-
tions with Microsoft Internet Authentication Service (MIAS), which is a component of
Microsoft Windows 2003 Server.
WiKID WiKID Systems is a PAP or CHAP key-based two-factor authentication method that
functions with public key cryptography. The client sends an encrypted PIN to the
WiKID server and receives a one-time pass code with a short expiration period. The
client logs in with the pass code. See
more on WiKID authentication.
NT Domain A network-validated domain-based authentication method that functions with a Micro-
soft Windows NT Domain authentication server. This authentication method has been
superseded by Microsoft Active Directory authentication but is supported to authenti-
cate legacy Windows clients.
Active Directory A network-validated domain-based authentication method that functions with a Micro-
soft Active Directory authentication server. Microsoft Active Directory authentication
servers support a group and user structure. Because the Active Directory supports a
multilevel hierarchy (for example, groups or organizational units), this information can
be queried to provide specific group policies or bookmarks based on Active Directory
attributes.
Note: A Microsoft Active Directory database uses an LDAP organization schema.
LDAP A network-validated domain-based authentication method that functions with a Light-
weight Directory Access Protocol (LDAP) authentication server. LDAP is a standard
for querying and updating a directory. Because LDAP supports a multilevel hierarchy
(for example, groups or organizational units), this information can be queried to pro-
vide specific group policies or bookmarks based on LDAP attributes.
7-2
Appendix C, "Two Factor
Managing Users, Authentication, and Certificates
v1.0, January 2010
Authentication" for