Situation: The client just configures MFA for their PA 850 Firewall and test works. However, they can’t login with timeout message:
Troubleshooting: in most cases, this is an authentication server is inaccessible issue. When we check DUO status, we find it was denied because of Location Unknow.
For a temporary solution, we enable Bypass on the DUO website.
Then we find the problem is the DUO app Notification was off. After turning it on, we can login PA 850 without any issues.
Online research suggestion it could be the Duo Mobile app to deactivate. Also make sure the account of DUO-PROTECTED had not been disabled on the DUO app.
Please refer to this post:
