I am having issues with Cisco Duo and Palo Alto Global Protect. Two-factor authentication for Palo Alto Global Protect Radius has been set-up and is working for a handful of users. The strange problem is that some users cannot authenticate past the Global Protect username and password fields. The Palo Alto Firewall is displaying invalid username and password. I know the firewall is talking to the AD as some users are connecting fine. If I roll back so Global Protect is only using AD credentials this works for all users. I can’t understand why it works for some users and not others. Any help much apricated.
Welcome to the Duo Community.
Please reach out to Duo Support with this query so we can gather logs and review the case.