Palo Alto PA Series Firewall version 7.x prompts for passcode twice (back to back) while doing authentication from global protect
Originally Published: 2016-06-01
Article Number
Applies To
RSA Product/Service Type: RSA Authentication Manager
RSA Version/Condition: 8.1
Issue
- After upgrading the Palo Alto PA Series Firewall from version 6.x to 7..x, it prompts for passcode twice (back to back) while doing authentication from global protect.
- Error in the Authentication Activity Monitor showing as below.
- Authentication Method Failed: Passcode Format Error.
- Authentication Method Failed.
Cause
Resolution
- Enter the 1st passcode/tokencode for the initial password prompt in the Global Protect and will see the 2nd prompt asking for the password again.
- Once the passcode/tokencode changes, enter the new code on to the 2nd password prompt.
- The Authentication is successful.
Related Articles
In which scenarios does RSA ACS Server return the CAVV (VISA) / UCAF (MC) Value in the Payment Authentication (PA) Respons… Number of Views RSA Governance & Lifecycle Recipes: Chart - AD Orphan Account Summary Number of Views Palo Alto Cloud Identity Engine - SAML My Page SSO Configuration - RSA Ready Implementation Guide Number of Views Palo Alto Cloud Identity Engine - RSA Ready Implementation Guide Number of Views Palo Alto NGFW 10.1.7 - REST API Configuration - RSA Ready Implementation Guide Number of Views
Trending Articles
Troubleshooting RSA SecurID Access Identity Router to RSA Authentication Manager test connection failures RSA SecurID Software Token 5.0.2 Downloads for Microsoft Windows RSA Authentication Manager 8.9 Release Notes (January 2026) Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Authentication Manager 8.8 Setup and Configuration Guide
Don't see what you're looking for?
