Credential Forwarding to Some or All Gateways
With two-factor authentication, you can specify the portal and types of gateways (internal,
external, or manual only) that prompt for their own set of credentials. This option
speeds up the authentication process when the portal and the gateway require different
credentials (either different OTPs or different login credentials entirely). For each
portal or gateway that you select, the app does not forward credentials, allowing you to
customize the security for different GlobalProtect components. For example, you can have
the same security on your portals and internal gateways, while requiring a second factor
OTP or a different password for access to those gateways that provide access to your
most sensitive resources.