MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource Access

Metgatz — Sat, 21 May 2022 17:16:13 GMT

Hello good afternoon, thank you very much for the constant cooperation, for the excellent will and for the help and support.
Dear all, what is the best strategy for a simple way to use a MFA for access to certain resources of the internal network.

Example what you are looking for, as an additional protection, is that through the web captive portal, first ask you to validate your LDAP credentials (Active Directory) and as a second authentication factor, ask you for a username and password of a local account of Radius or Tacacs +, just completed this, allow you to enter the certain resource. Example an https web server of an internal system.

What would be the recommended steps as well as if this is supported to configure the Palo Alto Networks ?

Thank you very much, I remain attentive, greetings and attentive to your comments.

Re: MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource Access

kiwi — Wed, 25 May 2022 08:58:18 GMT

Hi @Metgatz ,

I believe this DOC describes exactly what you're looking for:

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/authentication/configure-multi-factor-authentication

Cheers,

-Kiwi.

topic Re: MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource Access in General Topics

MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource Access

Re: MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource Access