Palo Alto PA Series Firewall version 7.x prompts for passcode twice (back to back) while doing authentication from global protect
Originally Published: 2016-06-01
Article Number
Applies To
RSA Product/Service Type: RSA Authentication Manager
RSA Version/Condition: 8.1
Issue
- After upgrading the Palo Alto PA Series Firewall from version 6.x to 7..x, it prompts for passcode twice (back to back) while doing authentication from global protect.
- Error in the Authentication Activity Monitor showing as below.
- Authentication Method Failed: Passcode Format Error.
- Authentication Method Failed.
Cause
Resolution
- Enter the 1st passcode/tokencode for the initial password prompt in the Global Protect and will see the 2nd prompt asking for the password again.
- Once the passcode/tokencode changes, enter the new code on to the 2nd password prompt.
- The Authentication is successful.
Related Articles
In which scenarios does RSA ACS Server return the CAVV (VISA) / UCAF (MC) Value in the Payment Authentication (PA) Respons… Number of Views RSA Governance & Lifecycle Recipes: Chart - AD Orphan Account Summary Number of Views RSA Governance & Lifecycle Recipes: Chart - AD User Account Control Summary Number of Views Palo Alto NGFW 10.1.7 - REST API Configuration - RSA Ready Implementation Guide Number of Views RSA Governance & Lifecycle Recipes: Chart - Application - Application Account & Orphan Trending Number of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Governance & Lifecycle 8.0.0 Administrators Guide RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
