Yep. Palo Alto. There is very limited Linux support, but not for the authentication method we used (which did some browser-based auth that I don't quite remember)