cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

About nishanna

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
nishanna
‎11-20-2018
since ‎05-25-2018
L1 Bithead
User Activity
User Profile
User Badges
Public Statistics
Date Registered ‎05-25-2018 10:19 AM
Date Last Visited ‎11-20-2018 04:24 PM
Total Messages Posted 5
Total Likes Received 4

Re: RADIUS Server failover not working via Authentication Profile

by in General Topics
‎11-20-2018 01:03 PM
‎11-20-2018 01:03 PM
Yes, it does. The only negative byproduct of this solution is that if both RADIUS servers are available and the user doesn't enter their 2FA within the first 25 seconds, they will receive another 2FA when the 2nd RADIUS server is queried.   But otherwise, if RADIUS server 1 is down, after 25 seconds RADIUS server 2 is queried and the user is able to log in. ... View more

Re: RADIUS Server failover not working via Authentication Profile

by in General Topics
‎11-20-2018 12:48 PM
3 Kudos
‎11-20-2018 12:48 PM
3 Kudos
Managed to solve the issue with PAN TAC support. These were the changes we made (note that we use 2FA which is why the longer than usual time-outs):   - We changed the following configuration in the GUI to allow the necessary time to connect: From FW > Network > Globalprotect > Agent > <agent_config_name> > APP - Portal connection timeout = 90 - TCP connection timeout = 90 - TCP receive timeout = 90 Changed the GP timeout from the cli: # set deviceconfig setting global-protect timeout 50   Reduced the RADIUS timeout slightly in the GUI: FW > Device > Server Profile > RADIUS > Timeout = 25, Retries = 1 ... View more

Re: RADIUS Server failover not working via Authentication Profile

by in General Topics
‎11-16-2018 07:19 PM
‎11-16-2018 07:19 PM
Well I made some progress using the  "set deviceconfig setting global-protect timeout" command. My 2 RADIUS servers are 35 second timeout, 1 retry so I set the value to 70 seconds. When I log in using the https GP webpage portal, it works perfect. But when I try to log in using the GP software client, I get a 2FA notification as if it's going to work, but then the client shows disconnected.   Did you have a similar problem? ... View more

Re: RADIUS Server failover not working via Authentication Profile

by in General Topics
‎11-16-2018 01:05 PM
1 Kudo
‎11-16-2018 01:05 PM
1 Kudo
Thank you for the detailed response!!! I'm in the same boat as you and need a longer timeout to allow for two factor authentication.   I figured there must be a CLI command to increase the globalprotect timeout to accomodate the timeout values in the RADIUS server configuration. I will give the  "set deviceconfig setting global-protect timeout  <range is 3-150 sec>" command a shot and see if that works for me.   I opened up a support case, but I suspect I'll get the same answer as you. Thanks again. ... View more

Re: RADIUS Server failover not working via Authentication Profile

by in General Topics
‎11-16-2018 12:06 PM
‎11-16-2018 12:06 PM
Just wondering if you managed to find a solution to your problem? I'm having the same issue... ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎11-20-2018 04:24 PM
Latest Tags
No tags yet
Likes Given To
View All
Likes From
Latest Blogs
Latest Posts
Privacy Policy Terms of Use
Copyright 2007 - 2021 - Palo Alto Networks