Palo Alto Networks firewalls and Panorama
support
Kerberos V5
single sign-on (SSO) to authenticate administrators to the web interface
and end users to Authentication Portal. With Kerberos SSO enabled,
the user needs to log in only for initial access to your network
(such as logging in to Microsoft Windows). After this initial login,
the user can access any browser-based service in the network (such
as the firewall web interface) without having to log in again until
the SSO session expires.