x-auth support

[AlainDesnoyers1]

I am trying to enable x-auth support on my Global Protect Gateway I configured and under Agent>Tunnel Settings , I do not have the "enable x-auth" option, only "enable IPSEC" IS this a GP licensing issue? I read the doc for that and it doesnt mention x-auth as one of the advanced features.

Thanks

[aleksandar.astardzhiev]

Hi @AlainDesnoyers1 ,

You don't need GlobalProtect license to use X-Auth.

What PanOS version are you running?

Check if you can see X-Auth related CLI commands available. Login to SSH -> enter config mode and search commands containing string "third-party"

user@myfw# find command keyword third-party
show network tunnel global-protect-gateway <name> ipsec third-party-client
set network tunnel global-protect-gateway <name> ipsec third-party-client
set network tunnel global-protect-gateway <name> ipsec third-party-client enable <yes|no>
set network tunnel global-protect-gateway <name> ipsec third-party-client group-name <value>
set network tunnel global-protect-gateway <name> ipsec third-party-client group-password <value>
set network tunnel global-protect-gateway <name> ipsec third-party-client rekey-noauth <yes|no>
set global-protect global-protect-portal <name> client-config configs <name> third-party-vpn-clients [ <third-party-vpn-clients1> <third-party-vpn-clients2>... ]

[AlainDesnoyers1]

Ya tried that, looks like it's not available when running in FIPS mode and thats the mode I'm running in.