topic Re: syncronize admin roles via panaroma to pa-500 in General Topics

syncronize admin roles via panaroma to pa-500

michael_kurmies — Wed, 14 Dec 2011 11:56:02 GMT

Hi,

we are currently running PAN-OS 3.1.8 on our pa-500s and we are using PAN-OS 4.0.2 on our panaroma server.

Is there any way to create admin-roles on panorama and push them to the devices or must we create each role on any device separately.

Thanks for your help.

Re: syncronize admin roles via panaroma to pa-500

essnet — Wed, 14 Dec 2011 14:25:25 GMT

I guess one would answer that everyone should connect to Panorama (even local admins), from which they can do their job.

Re: syncronize admin roles via panaroma to pa-500

mschuricht — Wed, 14 Dec 2011 15:48:46 GMT

This functionality is not possible today in Panorama. The suggestion to utilize context switch to do device level management is valid and should meet your needs.

Have you looked at doing device level management through Panorama via context switching?

Re: syncronize admin roles via panaroma to pa-500

cory_peterson — Wed, 28 Dec 2011 15:22:58 GMT

The problem with the Context view is how slow it is. Switching between contexts even with 4.1 is extermely slow. Until this is fixed I do not see device configuration through panorama as a viable option. The ability to push Admin Roles and Authentication methods from panorama to the firewalls is something that needs to be added.