This session will review how to take advantage of the authentication enforcement mechanism on a Palo Alto Networks firewall by requiring authenticated access to a specific portion of the web application. In this example, the web application allows basic authenticated or even unauthenticated access to most of the site. When users attempt to access privileged site administration content, an additional authentication attempt is triggered that requires a valid second factor in order to succeed.