Authentication Profile

[Shawverr]

SAML with RSA MFA authentication profile is getting synced on the HA active/passive firewall.  The issue is that each node needs it's own unique authentication profile.  As soon I change it on one node it sync's to the passive node.  Is there any way to not have the authentication profile sync?

[reaper]

you can clone the existing auth profile and have one for each peer In the meanwhile there is a Feature Request out to add the ability to select sync/no sync for auth profiles, you can reach out to your local SE and have them add your vote: FR ID: 11251

[Shawverr]

Thank you for the reply!  I'm not sure what you mean by "you can clone the existing auth profile and have one for each peer" or exactly how that will help me.  Because each instance is tied to a cert from with RSA Cloud Administration I don't think I can clone the auth profile.  Without the ability to select sync/no sync for auth profiles, I'm kind of dead in the water.