Situation: The client configures MFA for PA Firewall GloablProtect connection. It doesn’t work. in DEVICE>User Identification>User Mapping>Server Monitoring, it shows Access denied.
Case 1. Microsoft has disable WMI which used by Palo Alto as default.
Case 2: Pal Alto Agent doesn’t work or configured incorrectly.