What is the authentication sequence fallback criteria?
15338
Created On 08/21/19 22:39 PM - Last Modified 03/05/20 00:16 AM
Question
What is the authentication sequence fallback criteria?
Environment
FW
When authentication sequences contains:
- First: external auth profile (RADIUS)
- Second: local user database
Answer
The authentication sequence will check every auth profile in the list until a successful login occurs.
That happens even if a server in the list returns an invalid password response or failed login.
Example: A user might provide the wrong password for in this case RADIUS but still authenticate successfully if the password matches the local user database.
Additional Information
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence.html