Situation: The client has been using DUO for Palo Alto firewall MFA. They would like to add the secondary DUO Proxy server for the redundancy. However, they can’t find any article on PA support.
Suggestion:
- Create two MFA server profiles
- Go to the Authentication profile > select the profile > Go to the factors > add that two MFA profiles and test. (Check on the DUO server which profile is hitting)
- Change the priority of the MFA server profile (In the factors tab) and test. (Check on the DUO server which profile is hitting)