Active Directory thru ZD Captive Portal vs 802.1x

Question

I'm trying to setup a WLAN for a customer where its employees can connect to the WLAN and authenticate using their Active Directory account. Is it better if I use 802.1x (FreeRADIUS) or just use ZD's built in Captive Portal (Web Authentication)? What are the advantages of using 802.1x? Setting up FreeRADIUS is a bit of a hassle.

By the way, can devices that are not joined to their domain connect to the WLAN either via the two options?

unknown · Answer

By the way, since this is a first for me (configuring 802.1x as authentication), does encryption apply automatically to the credentials only or the whole frame/data traffic? I don't need to configure anything else on RADIUS but ZD IP and external AAA server like AD? I think I can't use ZD's Captive Portal if on 802.1x, right? I have to provide that separately?

unknown · Answer

That's what I am concerned right now. I'm already checking FreeRADIUS guides on where to configure AD. I just know where to enter the ZD IP on FreeRADIUS so far.

unknown · Answer

Just keep in mind that as you are not using  802.1X or a PSK this data is not encrypted and is the same as using an open hotspot SSID all you're doing is using AD to authenticate.