Firewall Useraccounts/Passwords get overwritten by Panorama

[hendrik.stiefel]

Hi all,

we have some 160 firewalls connected to a single panorama.

One of our suppliers get read only accounts on the firewalls. The accounts including the password and profiles were created on panorama and then pushed as device settings to the firewalls.

The supplier can change the local firewall password and login with a new password.

However, if we push new device settings, the initial password is set again and the changed password is lost. 

Can we do anything to prevent this behaivior? 

Best regards

Hendrik

[reaper · Accepted solution]

hi @hendrik.stiefel

your supplier will need to convey the new password to you so you can manage it centrally from panorama and push it out to all the firewalls that hold his username

[hendrik.stiefel]

Hi,

thanks for the information. 

KR

Hendrik

[reaper]

if you grant them access to panorama they can change it themselves, but I take this is not how you'd like this set up?

you could make them a profile that only shows the firewalls they should be able to see, elimnminating the need for them to connect to individual machines and seperate policies on each allowing said access, efectively raising your security as they will only get access to a centralized infrastructure