An organization has configured GlobalProtect in a hybrid authentication model using both certificate-based authentication for the pre-logon stage and SAML-based multi-factor authentication (MFA) for…

Question

Options

• AThe GlobalProtect agent uses the machine certificate to establish a pre-logon tunnel; upon user
• BThe GlobalProtect agent uses the machine certificate during pre-logon for initial tunnel
• COnce the machine certificate is validated at pre-logon, the Windows endpoint completes MFA on
• DGlobalProtect requires the user to log in first for SAML-based MFA before establishing the pre-

• A
  93% (57)
• B
  3% (2)
• C
  2% (1)
• D
  2% (1)

Explanation

In a hybrid authentication model with both certificate-based authentication for pre-logon and SAML- based multi-factor authentication (MFA) for user logon, the GlobalProtect agent processes the flow as follows: During the pre-logon stage, the agent uses the machine certificate to authenticate and establish the initial VPN tunnel. Once the user logs in (after the machine is connected), the agent then triggers SAML-based MFA to ensure the user is authenticated with multi-factor authentication, validating both the device and the user identity before granting full access. This method ensures that both the device and user are properly authenticated and validated in the hybrid authentication model.

No community discussion yet for this question.