Multi factor Low Cost / Inexpensive, for GP and for Managment GUI/MGT
Hello good afternoon, as always, thank you for your time and your collaboration.
It is possible to implement a low cost MFA for VPN Global protect and/or for the Managment Web-GUI access, as follows.
As main factor, or as first case, the authentication with the User via LDAP, and as second factor the authentication with a local user ? Is this feasible to implement in Palo Alto Networks Firewalls?
I remain attentive, thanks as always for the good vibe, collaboration, comments, etc.
Best regards
You can only use a factor (username) once. You can add additional factors (2FA, certificate, biometric, hwtoken,...)
So for a cheap MFA you can do user credentials + certificate for GP login, and then do an authentication portal as an additional username based factor