topic Issue using MFA in GlobalProtect ) in GlobalProtect Discussions https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-using-mfa-in-globalprotect/m-p/535788#M3825 <P>When connecting with Ironchip (MFA), two-factor authentication is only succesfull if the IP is specified in the gateway. If we use the domain to connect GlobalProtect the MFA is not working.</P> <P>&nbsp;</P> <P>The client auth is&nbsp;</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="config1.JPG" style="width: 580px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48999i36202BD843163B06/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="config1.JPG" alt="config1.JPG" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 24 Mar 2023 08:56:01 GMT BigPalo 2023-03-24T08:56:01Z Issue using MFA in GlobalProtect ) https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-using-mfa-in-globalprotect/m-p/535788#M3825 <P>When connecting with Ironchip (MFA), two-factor authentication is only succesfull if the IP is specified in the gateway. If we use the domain to connect GlobalProtect the MFA is not working.</P> <P>&nbsp;</P> <P>The client auth is&nbsp;</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="config1.JPG" style="width: 580px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48999i36202BD843163B06/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="config1.JPG" alt="config1.JPG" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 24 Mar 2023 08:56:01 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-using-mfa-in-globalprotect/m-p/535788#M3825 BigPalo 2023-03-24T08:56:01Z Re: Issue using MFA in GlobalProtect ) https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-using-mfa-in-globalprotect/m-p/536619#M3836 <P>Any idea??</P> <P>&nbsp;</P> <P>Why does the behaviour can change introducing IP or DOMAIN in global protect client.&nbsp;</P> Mon, 27 Mar 2023 15:04:07 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-using-mfa-in-globalprotect/m-p/536619#M3836 BigPalo 2023-03-27T15:04:07Z