How to configure MFA using DUO for palo alto firewall?

To configure Multi-Factor Authentication (MFA) using DUO for Palo Alto firewall, follow these steps:

  1. Sign up for a DUO account: Go to the DUO Security website and sign up for an account. After creating your account, navigate to the DUO Admin Panel.
  2. Add Palo Alto Networks as an application: In the DUO Admin Panel, go to Applications > Protect an Application > Palo Alto Networks. Then, select the type of Palo Alto Networks application you are using, such as GlobalProtect or Panorama.
  3. Configure Palo Alto Networks in DUO: In the DUO Admin Panel, go to Palo Alto Networks > Configuration. Enter the API hostname, integration key, and secret key provided by DUO.
  4. Configure Palo Alto Networks for MFA: In the Palo Alto Networks web interface, go to Device > Authentication Profile > DUO. Enter the same API hostname, integration key, and secret key provided by DUO.
  5. Enable MFA for Palo Alto Networks: In the Palo Alto Networks web interface, go to Device > Multi-Factor Authentication. Enable the checkbox for DUO.
  6. Test the MFA configuration: Try logging into Palo Alto Networks and verify that you are prompted for MFA authentication.

That’s it! You have successfully configured MFA using DUO for your Palo Alto firewall.

Published by

Bob Lin

Bob Lin, Chicagotech-MVP, MCSE & CNE Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com