PAN-OS separates 'where is the identity server' from 'how do we authenticate'. A server profile tells the firewall how to reach an external service. An authentication profile says which server profile, or the local database, to use for a given login and adds rules such as multi-factor authentication (MFA) and allow lists. Features such as administrator login, GlobalProtect, Authentication Portal and the web proxy then reference the authentication profile. Keeping these layers straight makes configuration reusable and makes exam questions much easier.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.