Limiting users access in palo alto firewall

[Vijaygvasan]

Hi Team,

I have a query where i need to know whether there is any features or configurations needs to be done on simultaneous login by users.

Currently its unlimited for users by palo alto firewall. we need to restrict users unlimited access by any means possible.

Let me know what are the possibilities. Either by hip profiles or user credential based etc.

If its aldready there or its a feature right now let me know the possibilities.

Cheers!!!!

[SebRupik]

Hi there,

If you are talking about adminstator accounts on the firewall, have you considered creating custom Role Based profiles and assigning them to the local accounts?

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/firewall-administration/reference-web-int...

cheers,

Seb.

[Vijaygvasan]

What about the users accessing GP or Captive portal? Is there anything to limit their access?

[OtakarKlier]

Hello,

Security policies would be the beset in that case. Make sure you are using user-id mapping and you can set security policies to use AD accounts and/or groups.

Cheers!