Duo integrates with your Palo Alto GlobalProtect Gateway via RADIUS to add two -factor authentication to VPN logins. Increase the "Timeout" to at least 30 (60 recommended if using push or phone authentication). to enable it to minimize Duo authentication requests at client reconnection during one gateway session..