Local admin accounts on PAN firewalls?

[Sly_Cooper]

Hi,

We use Panorama to manage or configure individual PAN firewalls. There is however times when we need to connect to the individual firewall for troubleshooting or faster response while monitoring. The Panorama is configure with Authentication Profile to authenticate against Active Directory. We would like to have the same facility for the individual devices. The auth profile and LDAP config is pushed from Panorama however the Administrators are not pushed. I don't to configure individual admins on each and every firewall (we have 14 devices). Is there any way to achieve this? We are running 4.1.9 version.

[SCoupland]

The ability to push Auth Profiles, Server Profiles and Admin Accounts down to managed devices was added in Panorama V5. You'd have to upgrade to 5.0 on the Panorama (and I believe all the firewalls) to achieve this functionality or individually configure each firewall manually or do some cut and paste work with each firewalls XML config (I don't recommend that).

[Sly_Cooper]

- Thanks. We plan on upgrading our devices to 5.x soon. Good to hear that the feature is added in 5.x.

[ExclusiveNetworksGermany]

The other way in 4.1 is to authenticate through Radius.

In this case there is no need to configure the Local Admin Accounts.

You can use this guide to configure

Microsoft Network Policy Server for Logins.

Cheers

Marco