Unable to Delete "Trusted MFA Gateways" Configuration in GlobalProtect Portal App
9526
Created On 04/10/19 15:00 PM - Last Modified 04/11/19 17:36 PM
Symptom
Trusted MFA gateways configuration configured as follows:
When trying to delete the "Trusted MFA Gateways" configuration in GlobalProtect, it fails with below error:
GP -> client-config -> configs -> Agent Config -> gp-app-config -> config -> mfa-trusted-host-list -> value is invalid
Environment
PAN-OS 8.0, 8.1
Resolution
Use the below command to delete the Agent Config:
admin@PA-VM-62# delete global-protect global-protect-portal GP client-config configs "Agent Config" gp-app-config config mfa- mfa-enabled config mfa-enabled mfa-listening-port mfa-listening-port mfa-notification-msg mfa-notification-msg mfa-trusted-host-list mfa-trusted-host-list <value> name value <Enter> Finish input
Additional Information
For more information, please refer to the following article:
Authentication Policy and Multi-Factor Authentication for GlobalProtect