https://live.paloaltonetworks.com/t5/next-generation-firewall/issues-with-ssh-and-telnet-access-only-on-the-passive-firewall/m-p/1240913#M6416 <P><STRONG>I’m having an issue accessing the passive firewall in my cluster via SSH or Telnet. I can access it normally through the GUI and authenticate using LDAP or my local admin user. The active firewall authenticates both GUI and CLI without any problems.</STRONG></P> <P><STRONG>What I’ve tried:</STRONG></P> <UL> <LI>Restarted the firewall.</LI> <LI>Reset the SSH service via API and also rebooted the device.</LI> <LI>Created an SSH profile and applied it to the management interface, then restarted the service.</LI> <LI>Verified the admin role for CLI access on both firewalls (active/passive).</LI> <LI>Followed this procedure: <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAsiCAG" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAsiCAG</A>, but it didn’t work.</LI> <LI>Note: Telnet access also fails.</LI> </UL> <P><STRONG>Details:</STRONG> When authenticating via SSH or Telnet, shows “Access denied,” but in <STRONG>Monitor &gt; System</STRONG> logs, it shows <CODE>auth-success</CODE>.</P> Wed, 29 Oct 2025 18:10:06 GMT jtjesus 2025-10-29T18:10:06Z https://live.paloaltonetworks.com/t5/next-generation-firewall/issues-with-ssh-and-telnet-access-only-on-the-passive-firewall/m-p/1240913#M6416 <P><STRONG>I’m having an issue accessing the passive firewall in my cluster via SSH or Telnet. I can access it normally through the GUI and authenticate using LDAP or my local admin user. The active firewall authenticates both GUI and CLI without any problems.</STRONG></P> <P><STRONG>What I’ve tried:</STRONG></P> <UL> <LI>Restarted the firewall.</LI> <LI>Reset the SSH service via API and also rebooted the device.</LI> <LI>Created an SSH profile and applied it to the management interface, then restarted the service.</LI> <LI>Verified the admin role for CLI access on both firewalls (active/passive).</LI> <LI>Followed this procedure: <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAsiCAG" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAsiCAG</A>, but it didn’t work.</LI> <LI>Note: Telnet access also fails.</LI> </UL> <P><STRONG>Details:</STRONG> When authenticating via SSH or Telnet, shows “Access denied,” but in <STRONG>Monitor &gt; System</STRONG> logs, it shows <CODE>auth-success</CODE>.</P> Wed, 29 Oct 2025 18:10:06 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/issues-with-ssh-and-telnet-access-only-on-the-passive-firewall/m-p/1240913#M6416 jtjesus 2025-10-29T18:10:06Z