Our wireless uses a Cisco ACS server for Radius with PEAP authentication and various levels of encryption, we don't broadcast the SSID, etc..