2 Factor with Palo Alto, best solution?

[choff123]

What does everyone have setup as far as 2 factor goes?

I have a consultant here and we're thinking about going to the Microsoft MFA server route. Seems ok but not very flexible for things other than VPN.

Any feedback on other solutions would be appreciated. I was hoping to get all external client VPN using 2 factor, next I would like to have 2 factor bound to every domain admin account.

thanks

[BLH]

http://smspasscode.com works nicely for admin and GlobalProtect access (disclaimer; I used to work for the company). Very flexible product.

Whatever you do - just stay away from RSA :smileylaugh:

[choff123]

thanks ill take a look

[skusnarowis]

Phonefactor works well - before Microsoft bought it. I don't know what state it is in now. But it was really nice...everyone has a phone now....