2.5.914 and below
TPAM does not support Challenge Response for primary authentication. If TPAM receives an Access-Challenge from the Radius server, it is ignored, and TPAM treats the users next response as a completely new login.
Challenge-response is only supported when it is used as secondary authentication.
2.5.915
Challenge response is now supported for Radius and Defender primary authentication.