We have the requirement where we have to setup dual authentication for some set (Group) of user and single authentication for remaining global protect user. Is this duable? if yes, please provide info.
Note : We have the single gateway.
Are you using PAN-OS 8.0.x?
I would setup two Authentication profiles and one Authentication Sequence profile.
Note: The authentication sequence will try to match the username against each one of the profiles above in a sequence, once it matches, and access is validated the access is granted.
You can still speicify in the User/Group tab inside the portal and gateway configuration the AD groups you want to allow, but the auth factor will be enforced via the profiles created before.
I hope it makes sense.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!