topic GlobalProtect Connected after Deny on MFA in GlobalProtect Discussions

GlobalProtect Connected after Deny on MFA

bborges — Wed, 19 Aug 2020 17:57:29 GMT

Hi all,
I am using global protect with MFA provided by Azure Authentication.
After put user and password, I had received the push on my mobile and the connection is established when I click on deny.

I can see the radius sendind access-reject to firewall, but the connection is performed normally.

Anyone has this problem or know how can I fix it?

Re: GlobalProtect Connected after Deny on MFA

bborges — Tue, 25 Aug 2020 14:12:15 GMT

My problem was identified and solved.
Global Protect was using auth-sequence on authentication.

Radius is the first on the list, after then we have a ldap profile, so, radius send access reject but the authentication is performed by active directory as second option.