Radius Server upgrade

Hi yeowkm99,

Windows Server 2025 supports Network Policy Server (NPS), which can provide RADIUS authentication. When planning the migration from Windows Server 2016, there are a few areas worth reviewing:

• NPS configuration: Review the existing RADIUS clients, shared secrets, connection request policies, and network policies to ensure the configuration is carried over correctly.

• Active Directory: If NPS is domain-joined, ensure it is registered in Active Directory as required and has the appropriate permissions.

• Authentication and certificates: Verify that the authentication methods and any certificates used for VPN or 802.1X authentication remain valid and compatible.

• Network connectivity: Confirm that the FortiGate can reach the new RADIUS server and that the required RADIUS ports are permitted by the network and Windows Firewall.

• Migration and testing: Where possible, test the new server before switching production authentication over, and retain a rollback option.

For reference, Microsoft provides guidance on planning NPS as a RADIUS server and installing NPS. Fortinet's RADIUS server configuration guide covers the corresponding FortiGate configuration.

I hope these points help with your upgrade planning.