07-21-2022 04:06 AM
Can i get any reference documents or link to implement Two factor authentication for Palo alto VPN users using ISE ?
07-21-2022 10:31 AM
This is a Cisco forum, I don't think you'll find much help here for configuring the Palo Alto side. ISE isn't an MFA provider. Have a look at DUO: https://duo.com/
There are plenty of integrations you can do between ISE and DUO.
03-13-2024 01:51 PM
Did you ever find a solution for this? I also was questioning if I can leverage ISE to use as a MFA solution for our Palo GlobalProtect login
03-13-2024 09:21 PM
You can use Cisco ISE as Radius to authenticate users in Palo firewalls.
Configuring Palo Alto Administrator Authentication with Cisco ISE (packetswitch.co.uk)
Basically, then you can leverage ISE authentication rules to have Duo as an external radius server for mfa.
Duo Two-Factor RADIUS Authentication for Cisco ISE | Duo Security
Regards,
Pulkit
If you find this useful, please mark it helpful and accept the solution.
03-14-2024 04:30 AM
03-14-2024 04:40 AM
That is a specific guest portal authentication mechanism which is not at all applicable in this case.
What you are after will require a 2FA mechanism and ISE is not the right product for that purpose. It can best work in conjunction to mfa solution like Duo.
03-14-2024 04:42 AM
Like I mentioned, similar to this use case.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide