Q: We would like to enable MFA on our PA 850. However, I don’t see the options.
A: You may integrate the firewall with MFA vendors through RADIUS or vendor APIs such as DUO, Radius, Ping, Microsoft Azure MFA, Ping-ID, SecurID, Okta, and RSA.
Please refer to these articles.
PAN-OS Administrator’s Guide – Configure Multi-Factor Authentication
Palo Alto Networks Compatibility Matrix – MFA Vendor Support