topic Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration in Next-Generation Firewall Discussions

Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

GWong4 — Fri, 03 Jan 2025 09:37:53 GMT

Hello Community,

I'm looking into integrating Okta's Multi-Factor Authentication (MFA) with GlobalProtect SSLVPN. May I know is the OKTA MFA is free for Palo Alto firewall global protect SSLVPN.

Can anyone confirm if Okta's MFA is indeed free when used with GlobalProtect? If so, could you point me towards any official documentation, guides, or knowledge base articles that detail the setup process?

Re: Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

ozheng — Mon, 06 Jan 2025 01:59:51 GMT

Hello @GWong4 ,

You need to check the pricing with Okta.

Based on the documentation below, there is no need of GP license for MFA.

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses

Olivier

Re: Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

GWong4 — Mon, 06 Jan 2025 03:00:25 GMT

Hi,

Yes, The GP license is free. How about the OKTA MFA is free or subscription?

Best Regards

Re: Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

ozheng — Tue, 07 Jan 2025 03:37:54 GMT

Hello @GWong4 ,

Okta is not part of Palo Alto Networks.

You can find the pricing on the page below.

https://www.okta.com/sg/pricing/

Olivier

Re: Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

GWong4 — Thu, 16 Jan 2025 15:43:58 GMT

Hi @ozheng

May i know is the Palo Alto firewall support google authenticator?

Best Regards

Re: Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

ozheng — Fri, 17 Jan 2025 01:10:24 GMT

Hello @GWong4 ,

As long the authentication method is SAML, any mean to authenticate against the user and the IdP (Okta, Duo....) is between the user and the IdP.

The firewall is a SP, it is only waiting the SAML assertion from the IdP to provide the service.

Olivier