Is it possible to use RSA MFA for admin console authentication?

fpascal4 — Wed, 11 May 2022 16:42:35 GMT

We have standardized on RSA SecurID for MFA for GlobalProtect VPN MFA, and locking down our internal network assets. I was asked if it is possible to use RSA SecurID MFA for secondary verification for admin accounts logging into our PA-820. I believe it is, but want to confirm. Is anyone doing this on their firewalls?

I tried setting the Authentication Profile for my own admin account on the firewall to the same profile used by our VPN. This is a SASL profile that authenticates against our RSA Cloud Authentication Service. It works fine for VPN, but I get "unknown user or password", specified as my authentication profile.

-Freeman

Re: Is it possible to use RSA MFA for admin console authentication?

MP18 — Wed, 11 May 2022 19:20:11 GMT

@fpascal4

I have configured Azure SAML for Admins logging into the PA.

Here is the link for RSA MFA

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/configure-multi-factor-authentication/configure-mfa-between-rsa-securid-and-firewall

Regards

topic Is it possible to use RSA MFA for admin console authentication? in General Topics

Is it possible to use RSA MFA for admin console authentication?

Re: Is it possible to use RSA MFA for admin console authentication?