On NPS, there's a setting "Disconnect clients without cryptobinding", which should force clients to check the security of the comms which, if I understand correctly, will prevent attacks such as Sycophant.
Is there an equivalent setting on FreeRADIUS/is this necessary/have I misunderstood?
