To configure Multi-Factor Authentication (MFA) using DUO for Palo Alto firewall, follow these steps:
- Sign up for a DUO account: Go to the DUO Security website and sign up for an account. After creating your account, navigate to the DUO Admin Panel.
- Add Palo Alto Networks as an application: In the DUO Admin Panel, go to Applications > Protect an Application > Palo Alto Networks. Then, select the type of Palo Alto Networks application you are using, such as GlobalProtect or Panorama.
- Configure Palo Alto Networks in DUO: In the DUO Admin Panel, go to Palo Alto Networks > Configuration. Enter the API hostname, integration key, and secret key provided by DUO.
- Configure Palo Alto Networks for MFA: In the Palo Alto Networks web interface, go to Device > Authentication Profile > DUO. Enter the same API hostname, integration key, and secret key provided by DUO.
- Enable MFA for Palo Alto Networks: In the Palo Alto Networks web interface, go to Device > Multi-Factor Authentication. Enable the checkbox for DUO.
- Test the MFA configuration: Try logging into Palo Alto Networks and verify that you are prompted for MFA authentication.
That’s it! You have successfully configured MFA using DUO for your Palo Alto firewall.