topic Integrated User-ID Agent - auto password rotation. in Next-Generation Firewall Discussions

Integrated User-ID Agent - auto password rotation.

sefrat — Mon, 24 Mar 2025 17:44:19 GMT

Hi all,

Has anybody here ever worked on a solution to automatically change the password of the user-id agent via a PAM solution?

My goal would be to have our PAM solution change the password in AD, than, via API if possible, change the password of the agent via Panorama.

I've started my journey and going through the API guide today but, figured to ask if anybody has gone down this path.

Thank you all,

Re: Integrated User-ID Agent - auto password rotation.

ozheng — Wed, 02 Apr 2025 04:31:36 GMT

Hello @sefrat ,

Panorama does not manage the User-ID agent (assuming by "user-id agent" we are talking about the software you install on a server member of the AD).

However, with the API, you can update panorama config (template) with the user-id password used by the firewalls (that is Agentless) then you can push the updated password to the firewalls.
No idea about if you PAM tool can do that, but on the paper on the line above is doable.

Olivier