topic Unable to access the firewall both GUI and CLI in Next-Generation Firewall Discussions

Unable to access the firewall both GUI and CLI

sidhardhatech — Tue, 08 Aug 2023 04:58:32 GMT

Unable to access the firewall both GUI and CLI, we are using panorama and we had total number of firewalls connected to panorama around 20 firewalls. Only one firewall getting this issue.

please help us any solution

Re: Unable to access the firewall both GUI and CLI

sidhardhatech — Tue, 08 Aug 2023 04:59:50 GMT

PA-415 using

Re: Unable to access the firewall both GUI and CLI

PavelK — Tue, 08 Aug 2023 05:29:39 GMT

Hello @sidhardhatech

could you provide more details?

- Is firewall completely down? Are you able to ping firewall's management / data plane interfaces?

- If firewall is up and you are having an issue to authenticate, have you tried context switching from Panorama to get into firewall?

Kind Regards

Pavel

Re: Unable to access the firewall both GUI and CLI

sidhardhatech — Tue, 08 Aug 2023 06:55:06 GMT

If firewall is up and you are having an issue to authenticate, have you tried context switching from Panorama to get into firewall?

Yes, firewall is working perfectly, only authentication issue.

while we enter username and password.

It shows INVALID username and password.

Re: Unable to access the firewall both GUI and CLI

PavelK — Tue, 08 Aug 2023 07:11:09 GMT

Hello @sidhardhatech

could you please confirm what authentication method you are using (LDAP, TACAC+, local accounts)?

Kind Regards

Pavel

Re: Unable to access the firewall both GUI and CLI

sidhardhatech — Tue, 08 Aug 2023 07:13:21 GMT

local account, admin not able to login

Re: Unable to access the firewall both GUI and CLI

ozheng — Tue, 08 Aug 2023 13:20:40 GMT

You create a new user account on Panorama, you commit then you push the configuration to the firewall.

Re: Unable to access the firewall both GUI and CLI

PavelK — Tue, 08 Aug 2023 23:38:39 GMT

Hello @sidhardhatech

thank you for reply.

In this case if Firewall is still online and registered in Panorama, I would either use context switch to connect from Panorama to managed Firewall and reset the password or push new account through Template.

Also, have you by any chance enabled password expire feature? Here is the KB for reference: Unable to Login to Firewalls through the GUI or CLI with any users

Kind Regards

Pavel