Can there be fallback authentication for GlobalProtect?

uscit — Mon, 20 May 2013 23:47:45 GMT

I ran into a scenario that rendered me useless remotely, and I'm wondering if I can configure secondary authentication for GlobalProtect...

I used GP to VPN in remotely. My GP is set up to authenticate through Active Directory, and it works fine. I was updating my VMWare environment and SAN, in which I needed to power down all VMWare servers (including Domain Controllers). During my SAN upgrades, I lost my GP connection. From that point, I couldn't re-establish my GP connection and it took me a minute to realize that it was because AD could not be contacted due to it being offline. I had to go on-site to finish all upgrades and restore the servers.

Is there a way to configure GP to allow a local login for myself if AD authentication doesn't work so that I can still connect to the PAN firewall, then I can manage my network without the reliance of AD when I know it's not going to be available (bring VMs back up)?

Re: Can there be fallback authentication for GlobalProtect?

sraghunandan — Tue, 21 May 2013 04:14:08 GMT

Please refer this doc:-

https://live.paloaltonetworks.com/docs/DOC-3388

Re: Can there be fallback authentication for GlobalProtect?

N-able — Sun, 17 Jul 2022 14:39:41 GMT

Access is denied to the article

topic Re: Can there be fallback authentication for GlobalProtect? in General Topics

Can there be fallback authentication for GlobalProtect?

Re: Can there be fallback authentication for GlobalProtect?

Re: Can there be fallback authentication for GlobalProtect?