Palo Alto PA Series Firewall version 7.x prompts for passcode twice (back to back) while doing authentication from global protect
4 years ago
Originally Published: 2016-06-01
Article Number
000050445
Applies To
Products: RSA Product Set: SecurID
RSA Product/Service Type: RSA Authentication Manager
RSA Version/Condition: 8.1
 
Issue
  1. After upgrading the Palo Alto PA Series Firewall from version 6.x to 7..x, it prompts for passcode twice (back to back) while doing authentication from global protect.
  2. Error in the Authentication Activity Monitor showing as below.
    1. Authentication Method Failed: Passcode Format Error.
    2. Authentication Method Failed.
Cause
This is an issue with Palo Alto.
Resolution
  1. Enter the 1st passcode/tokencode for the initial password prompt in the Global Protect and will see the 2nd prompt asking for the password again.
  2. Once the passcode/tokencode changes, enter the new code on to the 2nd password prompt.
  3. The Authentication is successful.