topic Single authentication policy across multiple vsys? in General Topics

Single authentication policy across multiple vsys?

Sly_Cooper — Fri, 03 Apr 2020 01:16:20 GMT

All,

I amtesting authentication policy for a certain project and was able to test it successfully with basic configuration. I am looking at a config where a single authentication policy could work across multiple vsys.

Scenario,

Firewall with multi-zone, one of the zones with web-server to intercept and redirect to the captive portal (with MFA). After successful authentication, the firewall will allow RDP access for the systems across multiple zone including non-web server zone. I have multiple environments running behind different vsys and would like to have a single authentication which would give access across multiple vsys. Is this possible? If yes then how?

Re: Single authentication policy across multiple vsys?

reaper — Fri, 03 Apr 2020 05:51:41 GMT

i think this should be doable by setting your server and authentication profile as 'shared'

Re: Single authentication policy across multiple vsys?

Sly_Cooper — Fri, 03 Apr 2020 14:36:07 GMT

@reapercan you please elaborate more? The shared profile will be able to push the profile to all vsys, however can the same session be used across multiple vsys assuming user login to one of the vsys's?