Global Protect Authentication Timing Out Before Configured Radius Server Timeout

• Global Protect Portal/Gateway Authentication Profile is using RADIUS
• RADIUS Server is using MFA. 
• RADIUS Server timeout is set to 40 seconds with 2 retries (effective timeout of 120 Seconds)
• Global Protect User Connects and doesn't complete the authentication process quickly. 
• Authentication timeout occurs at 30 seconds. 

• Global Protect
• RADIUS Servers

• global-protect timeout defaults to 30 seconds.
• If global-protect timeout lower than RADIUS server profile timeout/retries, the lower value will be used to timeout the authentication. 
• The timeout value is the timeout between Global Protect Client and firewall's Global Protect Portal/Gateway web-server. 

• Increase the global-protect-timeout value to be greater than the desired RADIUS authentication timeout. 

>configure
# set deviceconfig setting global-protect timeout 120
#commit