topic Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud in General Topics

Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

Hameed310382 — Thu, 05 Jul 2018 09:55:52 GMT

* We have Azure AD Connect sync On-Premise Active Directory with Azure AD

* We have valid Azure AD Premium license

We would like to know whether we can configure MFA for our VPN. If so which one we need to choose

Azure MFA server or Azure MFA cloud?

Please give me the highlevel steps to accomplish our requirement

Re: Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

LukeBullimore — Thu, 05 Jul 2018 10:00:08 GMT

Hi @Hameed310382

The vendor support list for MFA via RADIUS is outlined below.

https://www.paloaltonetworks.com/documentation/global/compatibility-matrix/mfa-vendor-support/mfa-vendor-support-table#id17CBB0W095Z

Documentation for configuring GlobalProtect with 2FA can be found in the GlobalProtect Administrators Guide.

https://www.paloaltonetworks.com/documentation/80/globalprotect/globalprotect-admin-guide/authentication/set-up-two-factor-authentication

Thanks,

Luke.

Re: Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

Remo — Sun, 08 Jul 2018 11:48:29 GMT

Hi @Hameed310382

For integrating Azure MFA you need to configure your on premise Azure MFA server as RADIUS server in your configuration. The list mentionned by @LukeBullimore shows only the natively integrated MFA cloud providers. With RADIUS, Paloalto supports almost every MFA software including Azure MFA.

Re: Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

Hameed310382 — Sun, 08 Jul 2018 11:51:56 GMT

So I need MFA server installed in On-Premise, can't I configure without any server in on-premise

Re: Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

b_sachitano — Thu, 12 Mar 2020 15:22:44 GMT

I know this is way old, but did you ever get this configured?