topic Local admin accounts on PAN firewalls? in General Topics

Local admin accounts on PAN firewalls?

Sly_Cooper — Wed, 24 Apr 2013 11:07:08 GMT

Hi,

We use Panorama to manage or configure individual PAN firewalls. There is however times when we need to connect to the individual firewall for troubleshooting or faster response while monitoring. The Panorama is configure with Authentication Profile to authenticate against Active Directory. We would like to have the same facility for the individual devices. The auth profile and LDAP config is pushed from Panorama however the Administrators are not pushed. I don't to configure individual admins on each and every firewall (we have 14 devices). Is there any way to achieve this? We are running 4.1.9 version.

Re: Local admin accounts on PAN firewalls?

SCoupland — Wed, 24 Apr 2013 16:00:23 GMT

The ability to push Auth Profiles, Server Profiles and Admin Accounts down to managed devices was added in Panorama V5. You'd have to upgrade to 5.0 on the Panorama (and I believe all the firewalls) to achieve this functionality or individually configure each firewall manually or do some cut and paste work with each firewalls XML config (I don't recommend that).

Re: Local admin accounts on PAN firewalls?

Sly_Cooper — Wed, 24 Apr 2013 16:08:51 GMT

- Thanks. We plan on upgrading our devices to 5.x soon. Good to hear that the feature is added in 5.x.

Re: Local admin accounts on PAN firewalls?

ExclusiveNetworksGermany — Mon, 29 Apr 2013 10:48:06 GMT

The other way in 4.1 is to authenticate through Radius.

In this case there is no need to configure the Local Admin Accounts.

You can use this guide to configure

Microsoft Network Policy Server for Logins.

Cheers

Marco