Last updated on March 26, 2024
Only all-embracing MFA protection can thwart hackers from slipping into your corporate network. Modern VPNs come with a set of tools to secure your users. But VPNs only use the login and password pair by default. As a result, hackers can hack a VPN account by brute-forcing it or exploiting a set of leaked credentials. Enable Multi-Factor Authentication (MFA) for Palo Alto GlobalProtect VPN to stop cyberattacks, mitigate threats, and enjoy the complete security of VPN connections.
How to Enable MFA on Palo Alto GlobalProtect VPN?
Rublon allows you to enable robust Multi-Factor Authentication for all your Palo Alto GlobalProtect VPN users by using the RADIUS or LDAP protocol. You can consolidate your primary authentication using one of the supported identity providers (IdP): Active Directory, OpenLDAP, FreeRADIUS, and more. Secondary authentication involves a strong second factor that secures your account even if hackers know your password. You can also enable a convenient Single Sign-On (SSO) experience for your users who log in to Palo Alto VPN and other applications compatible with SAML.
Authentication methods you can use as the second factor during Palo Alto GlobalProtect MFA are:
- Mobile Push – Rublon sends a push notification to your mobile device
- Email Link – Rublon sends you an email message with an authentication link
- Mobile Passcode – you append a TOTP passcode to your password when you log in
- WebAuthn/U2F Security Key – you plug in your security key to the USB port of your computer
- SMS Passcode – Rublon sends you a text message with a one-time code
- QR Code – you scan the QR code displayed on the screen
How to Configure Rublon 2FA for Palo Alto GlobalProtect
How Does Rublon MFA for Palo Alto GlobalProtect Work?
Here’s an example of Palo Alto GlobalProtect MFA using the Mobile Push authentication method.
1. Provide your username and password and click Connect.

2. Receive a push notification on your phone.

3. Approve the notification.
4. Connect to Palo Alto GlobalProtect VPN.

Benefits of Enabling Rublon MFA for Palo Alto GlobalProtect
- World-Class Security: Rublon MFA provides robust Single Sign-On (SSO) and secure remote access to Palo Alto GlobalProtect, dramatically reducing the risk of unauthorized access.
- Frictionless User Experience: Rublon MFA offers users hassle-free access to the network while maintaining high security standards by utilizing authentication methods such as FIDO security keys and Mobile Push.
- Increased Confidence: By using Rublon MFA, you have more confidence that your networks and applications are secure and that users are who they claim to be.
- Improved Visibility: With Rublon MFA, you have improved visibility into who is accessing your network and when. This allows you to proactively protect your infrastructure using Rublon’s Access Policies.
- Enhanced Compliance: Many organizations must meet specific regulatory and compliance standards, such as PCI DSS or FTC Safeguards Rule. Rublon MFA can help you ensure that these standards are being met.
Enable Sophisticated MFA for Your VPN logins
Rublon MFA is a comprehensive Multi-Factor Authentication solution that secures VPNs, cloud apps, RDP, and Linux logins.
For just 2 USD per user per month, you get robust Two-Factor Authentication (2FA) protection for an unlimited number of applications and servers.