Troubleshoot the Palo Alto Network VPN integration

Examine authentication logs:

  1. Open a web browser and navigate to the GlobalProtect Admin Page, or open the Palo Alto Networks Panorama.
  2. Navigate to Monitor > Authentication.
  3. In the search filter enter: subtype eq Radius.
  4. Open the Palo Alto Networks Administrative Shell and run the following commands:
    • debug authentication on dump
    • tail follow yes lines 20 mp-log authd.log
  5. Click enter to run the test. Review the logs for detailed output.

Test the Authentication Profile

  1. Open the Palo Alto Networks Administrative Shell and run the following command:test authentication authentication-profile <profile name> username <username> password

    Replace <profile name> and <username> with the values for your organization.

The command line test of the Authentication Profile does not support a second- factor challenge.

Receiving a second-factor challenge confirms that the configuration is working.