How to configure Palo Alto Firewall to intergrade with the second DUO Proxy server for redundancy

Situation: The client has been using DUO for Palo Alto firewall MFA. They would like to add the secondary DUO Proxy server for the redundancy. However, they can’t find any article on PA support.

Suggestion:

  1. Create two MFA server profiles
  2. Go to the Authentication profile > select the profile > Go to the factors > add that two MFA profiles and test. (Check on the DUO server which profile is hitting)
  3. Change the priority of the MFA server profile (In the factors tab) and test. (Check on the DUO server which profile is hitting)

Published by

Bob Lin

Bob Lin, Chicagotech-MVP, MCSE & CNE Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com