GP - MFA notification message for desktop clients

MikeCocat — Thu, 11 Jun 2020 15:30:04 GMT

I recently configured Cisco DUO with our GlobalProtect. When a user connects in on Windows/Mac there is no prompt from the client to go approve the MFA on their phone. It just hangs waiting. Can I have GP prompt the user letting them know that further action with MFA is required to proceed?

Re: GP - MFA notification message for desktop clients

tcleghorn — Thu, 11 Jun 2020 17:00:44 GMT

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/authentication/configure-globalprotect-to-facilitate-multi-factor-authentication-notifications.html

Take a look through there to see if that helps. Step 6>3 may be what you need:

Set Enable Inbound Authentication Prompts from MFA Gateways to Yes

Also, DUO has a pretty good step-by-step on setting-up with GP:
https://duo.com/docs/paloalto

topic Re: GP - MFA notification message for desktop clients in GlobalProtect Discussions

GP - MFA notification message for desktop clients

Re: GP - MFA notification message for desktop clients