Portal Auth v Gateway Auth

ExitCalm — Wed, 03 Sep 2025 09:22:29 GMT

Hello everyone,

I have read countless Palo documents and forums but still a little unclear on the above. I'm hoping someone can clear this up for me.

The environment I am referring to is Global Protect / Strata Cloud Manager.

Under workflows/ prisma access setup / global protect -

On that screen under the infrastructure tab we have "User Authentications"

Within there we have varying authentication methods where we can use SAML / Cert etc..

What is this authentication for? Is this for the portal only?

If I then go to the GlobalProtect App section within SCM we have app settings and tunnel settings.

Under App Settings / App Configuration / Advanced Options we then have another Authentication section with a bunch of different options. Where does this authentication take place and how is it related to the first user authentications I mentioned ad the start?

Just trying to get my head around the order of operations and where these different authentication settings are used during the login process.

Thanks!

Re: Portal Auth v Gateway Auth

reaper — Fri, 05 Sep 2025 08:24:50 GMT

in prisma access only one authentication is applied to both portal and gateway

You are referring to a traditional configuration on a firewall, there you can use different authentication on the portal and the gateway configs

topic Re: Portal Auth v Gateway Auth in Prisma Access Discussions

Portal Auth v Gateway Auth

Re: Portal Auth v Gateway Auth