Does Global Protect VPN has Two-Factor Authentication - Looking at VM-100/300 virtual PA and Physical PA-820

RaviKumarS — Fri, 16 Jul 2021 05:51:52 GMT

Team,

Customer is looking for Multi-Factor authentication for VPN client, currently they have GlobalProtect, but they need to enable MFA for remote users, does Palo Alto has any feature or solution to achieve this?

Need to check if both VM-Series and Physical has built-in MFA for remote VPN users (Global Protect)

VM-100/300 virtual PA and Physical PA-820

Any additional license required? Any third party integration is must?

Please advise.

Thanks & Regards,

Ravi Kumar S

Re: Does Global Protect VPN has Two-Factor Authentication - Looking at VM-100/300 virtual PA and Physical PA-820

Remo — Fri, 16 Jul 2021 19:46:47 GMT

Hi @RaviKumarS

Paloalto (no matter which model) does not have built in MFA. In order to use MFA you need a third party integration. This can be done by using RADIUS or SAML and with these methods you can use probably any MFA software you like (for example: Duo, Azure MFA, RSA, ...)

topic Re: Does Global Protect VPN has Two-Factor Authentication - Looking at VM-100/300 virtual PA and Physical PA-820 in General Topics

Does Global Protect VPN has Two-Factor Authentication - Looking at VM-100/300 virtual PA and Physical PA-820

Re: Does Global Protect VPN has Two-Factor Authentication - Looking at VM-100/300 virtual PA and Physical PA-820