topic Re: Global Protect Authentication Local User and AD user to allow both in General Topics

Global Protect Authentication Local User and AD user to allow both

Ashley_Dewoo — Tue, 08 Sep 2020 08:23:13 GMT

Hello,

I am setting up VPN on the Palo Alto. So far, I was using a local user database and it is working fine. I will need to move to AD authentication and tested ok.

However, the issue I am getting if that I can use only one type of authentication at a time by moving the authentication profile type up on the GlobalProtect Portal>Authentication> Client Authentication.

In this, I have configured two authentication profile Local and AD and only the top is working.

The local user is for external suppliers and I need to keep that.

Can you please help ?

Re: Global Protect Authentication Local User and AD user to allow both

Ashley_Dewoo — Tue, 08 Sep 2020 08:26:10 GMT

Attached the configuration.

Re: Global Protect Authentication Local User and AD user to allow both

Abdul-Fattah — Tue, 08 Sep 2020 08:54:30 GMT

Hi,

you can use authentication sequence, where you enter all Authentication profiles to be use for login.

from Device > Authentication sequence. create new sequence and select all needed profiles, and use this sequence-entry in GP (Portal/Gateway)

Re: Global Protect Authentication Local User and AD user to allow both

Ashley_Dewoo — Tue, 08 Sep 2020 10:30:47 GMT

Thanks Abdul very much.

The authentication worked perfectly for both.

Re: Global Protect Authentication Local User and AD user to allow both

Abdul-Fattah — Tue, 08 Sep 2020 10:34:37 GMT

you are welcome.

Can you mark the right correct answer?, thanks.