Does Global Protect VPN has Two-Factor Authentication - Looking at VM-100/300 virtual PA and Physical PA-820

[RaviKumarS]

Team,

Customer is  looking for Multi-Factor authentication for VPN client, currently they have GlobalProtect, but they need to enable MFA for remote users, does Palo Alto has any feature or solution to achieve this?

Need to check if both VM-Series and Physical has built-in MFA for remote VPN users (Global Protect) 

VM-100/300 virtual PA and Physical PA-820

Any additional license required? Any third party integration is must?

Please advise. 

Thanks & Regards,

Ravi Kumar S

[Remo · Accepted solution]

Hi @RaviKumarS 

Paloalto (no matter which model) does not have built in MFA. In order to use MFA you need a third party integration. This can be done by using RADIUS or SAML and with these methods you can use probably any MFA software you like (for example: Duo, Azure MFA, RSA, ...)