topic Re: Combine two methods for the authentication GlobalProtect Client in General Topics

Combine two methods for the authentication GlobalProtect Client

arnaud_b — Mon, 25 Jun 2012 20:51:02 GMT

Hello,

I want to know if it's possible to use two factor for a succeed authentication with GlobalProtect Client. I explain it.

In the configuration of GlobalProtect Client, you can define two method for the authentication of the clients (portals and gateways are the same configuration):

- Authentication Profile: you can define LDAP, Radius, local database

- Client Certificate profile: you put a specific certificate Root CA for the validation of the clients certificates

Is it possible to combine the two methods to validate the users for the authentication via Global Protect client ? With an another product like Juniper SecureAccess.

In the documentation, it's specified if you use the method "Client certificate profile" : In this SSL‐VPN configuration, we’re not using another form of authentication. We’re simply utilizing the client certificate to authenticate ssl‐vpn connections.

Thanks for your help the PaloAlto community

Regards,

Arnaud

Re: Combine two methods for the authentication GlobalProtect Client

arnaud_b — Fri, 29 Jun 2012 14:13:03 GMT

Hello,

Anyone test it ?

Regards,

Arnaud

Re: Combine two methods for the authentication GlobalProtect Client

mikand — Fri, 29 Jun 2012 16:44:38 GMT

Based on the video at Strong authentication for Palo Alto Secure Access SSL VPN Solutions | Nordic Edge | The Provider of Secure Identity Solutions I think it should somehow be possible (however they are using user/pass + OTP, from your description I think you want cert + user/pass).

Theres a technote also at Palo Alto Networks Integration till Nordic Edge One Time Password Server | Nordic Edge | Levererar lösningar för säker identitets- och åtkomsthantering