If you require strong authentication to protect sensitive
assets or to comply with regulatory requirements, such as PCI, SOX,
or HIPAA, configure GlobalProtect to use an authentication service
that uses a two-factor authentication scheme. A two-factor authentication
scheme requires two things: something the end user knows (such as a
PIN or password) and something the end user has (a hardware or software token/OTP,
smart card, or certificate). You can also enable two-factor authentication using
a combination of external authentication services, and client and
certificate profiles.
