Global Protect Authentication Local User and AD user to allow both

[Ashley_Dewoo]

Hello,

I am setting up VPN on the Palo Alto. So far, I was using a local user database and it is working fine. I will need to move to AD authentication and tested ok.

However, the issue  I am getting if that I can use only one type of authentication at a time by moving the authentication profile type up on the GlobalProtect Portal>Authentication> Client Authentication.

In this, I have configured two authentication profile  Local and AD and only the top is working.

The local user is for external suppliers and I need to keep that.

Can you please help ?

[Ashley_Dewoo · Accepted solution]

Attached the configuration.

[Abdul-Fattah]

Hi,

you can use authentication sequence, where you enter all Authentication profiles to be use for login.

from Device > Authentication sequence. create new sequence and select all needed profiles, and use this sequence-entry in GP (Portal/Gateway)

[Ashley_Dewoo]

Thanks Abdul very much.

The authentication worked perfectly for both.

[Abdul-Fattah]

you are welcome.

Can you mark the right correct answer?, thanks.