Extensible Authentication Protocol
(EAP) Support for RADIUS | All new RADIUS server profiles
use PEAP-MSCHAPv2 as the default Authentication Protocol,
and the Make Outer Identity Anonymous option
is enabled by default. The Auto option for
the Authentication Protocol has been deprecated. With
this deprecation, after you upgrade a firewall that was previously
configured to use Auto, the firewall will use
CHAP or PAP based on the protocol that was in use before the upgrade;
a firewall that was not configured to use RADIUS authentication
before upgrade will default to CHAP. After you upgrade, Panorama
templates use CHAP as the default authentication protocol. When
you downgrade a firewall that was configured to use PEAP-MSCHAPv2,
PEAP with GTC, or EAP-TTLS with PAP, the firewall will default to
CHAP. | 
