Hello community, thank you as always for your time and collaboration.
I have a question, some client is asking me and asking if Azure-AD can be used for authentication of administration access to the firewall...
Now with Global Protect we have configured it, without a theme there are no problems, now Global Protect the portal is exposed to the Internet... that means that I will have to expose my MGT to the Internet... I think this is not a good idea there.
The client wants to use their Azure-AD users and therefore their MFA that they have in Azure, but I feel that it is not the best idea if the Web-Gui must be exposed to the Internet.
Is there any alternative for this, to use offline or locally or somehow without having to expose the Web-Gui?