diff --git a/internal/outpost/radius/eap/tls/payload.go b/internal/outpost/radius/eap/tls/payload.go
index 2fd9a17e45..4c9951ee77 100644
--- a/internal/outpost/radius/eap/tls/payload.go
+++ b/internal/outpost/radius/eap/tls/payload.go
@@ -134,7 +134,7 @@ func (p *Payload) Handle(stt any) (protocol.Payload, *State) {
 	if st.HasMore() {
 		return p.sendNextChunk(st)
 	}
-	if st.HandshakeDone {
+	if st.Conn.writer.Len() == 0 && st.HandshakeDone {
 		return protocol.EmptyPayload{}, st
 	}
 	if len(st.Conn.OutboundData()) > 0 {