topic Limiting users access in palo alto firewall in General Topics

Limiting users access in palo alto firewall

Vijaygvasan — Thu, 14 Oct 2021 13:44:20 GMT

Hi Team,

I have a query where i need to know whether there is any features or configurations needs to be done on simultaneous login by users.

Currently its unlimited for users by palo alto firewall. we need to restrict users unlimited access by any means possible.

Let me know what are the possibilities. Either by hip profiles or user credential based etc.

If its aldready there or its a feature right now let me know the possibilities.

Cheers!!!!

Re: Limiting users access in palo alto firewall

SebRupik — Thu, 14 Oct 2021 15:37:16 GMT

Hi there,

If you are talking about adminstator accounts on the firewall, have you considered creating custom Role Based profiles and assigning them to the local accounts?

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/firewall-administration/reference-web-interface-administrator-access/web-interface-access-privileges/define-access-to-the-web-interface-tabs.html

cheers,

Seb.

Re: Limiting users access in palo alto firewall

Vijaygvasan — Thu, 14 Oct 2021 16:15:31 GMT

What about the users accessing GP or Captive portal? Is there anything to limit their access?

Re: Limiting users access in palo alto firewall

OtakarKlier — Thu, 14 Oct 2021 17:01:43 GMT

Hello,

Security policies would be the beset in that case. Make sure you are using user-id mapping and you can set security policies to use AD accounts and/or groups.

Cheers!