GlobalProtect with SecurEnvoy as a RADIUS Server

rwieseke — Wed, 16 Sep 2020 14:40:24 GMT

Hi everyone,

I have got a customer who like to use his SecurEnvoy Server for RADIUS with global protect.

I have done the configurations following this guide:

https://www.securenvoy.com/en-gb/integration-guides/vpn-remote-access/palo-alto-ad-integration

This dokument is outdated, we are using PAN OS 9.0.5 and GP 5.1.3

After some trial and error we got it work but it requires to enter the credentials twice (portal and gateway separate).

Is there any possibility to avoid this?

I have already played with the cookie-authentication. This seems to work, but if the cookie-lifetime is expired, will I have to fill in the credentials twice again?

Thank you for any hint.

Re: GlobalProtect with SecurEnvoy as a RADIUS Server

vathreya — Thu, 17 Sep 2020 05:15:42 GMT

Enable Cookie Authentication where Portal generates the cookie and gateway accepts the cookie or you can let portal generate and accept, and gateway accept as well.

Use of Authentication cookie prevents typing in credentials (within the auth cookie timeout period).

topic GlobalProtect with SecurEnvoy as a RADIUS Server in GlobalProtect Discussions

GlobalProtect with SecurEnvoy as a RADIUS Server

Re: GlobalProtect with SecurEnvoy as a RADIUS Server