topic Firewall Useraccounts/Passwords get overwritten by Panorama in General Topics

Firewall Useraccounts/Passwords get overwritten by Panorama

hendrik.stiefel — Wed, 29 Aug 2018 07:35:11 GMT

Hi all,

we have some 160 firewalls connected to a single panorama.

One of our suppliers get read only accounts on the firewalls. The accounts including the password and profiles were created on panorama and then pushed as device settings to the firewalls.

The supplier can change the local firewall password and login with a new password.

However, if we push new device settings, the initial password is set again and the changed password is lost.

Can we do anything to prevent this behaivior?

Best regards

Hendrik

Re: Firewall Useraccounts/Passwords get overwritten by Panorama

reaper — Wed, 29 Aug 2018 11:36:50 GMT

hi @hendrik.stiefel

your supplier will need to convey the new password to you so you can manage it centrally from panorama and push it out to all the firewalls that hold his username

Re: Firewall Useraccounts/Passwords get overwritten by Panorama

hendrik.stiefel — Wed, 29 Aug 2018 11:47:55 GMT

Hi,

thanks for the information.

Hendrik

Re: Firewall Useraccounts/Passwords get overwritten by Panorama

reaper — Wed, 29 Aug 2018 11:51:17 GMT

if you grant them access to panorama they can change it themselves, but I take this is not how you'd like this set up?

you could make them a profile that only shows the firewalls they should be able to see, elimnminating the need for them to connect to individual machines and seperate policies on each allowing said access, efectively raising your security as they will only get access to a centralized infrastructure