Local admin accounts on PAN firewalls?

Reply
Highlighted
L4 Transporter

Local admin accounts on PAN firewalls?

Hi,

We use Panorama to manage or configure individual PAN firewalls. There is however times when we need to connect to the individual firewall for troubleshooting or faster response while monitoring. The Panorama is configure with Authentication Profile to authenticate against Active Directory. We would like to have the same facility for the individual devices. The auth profile and LDAP config is pushed from Panorama however the Administrators are not pushed. I don't to configure individual admins on each and every firewall (we have 14 devices). Is there any way to achieve this? We are running 4.1.9 version.

Highlighted
L3 Networker

Re: Local admin accounts on PAN firewalls?

The ability to push Auth Profiles, Server Profiles and Admin Accounts down to managed devices was added in Panorama V5. You'd have to upgrade to 5.0 on the Panorama (and I believe all the firewalls) to achieve this functionality or individually configure each firewall manually or do some cut and paste work with each firewalls XML config (I don't recommend that).

Highlighted
L4 Transporter

Re: Local admin accounts on PAN firewalls?

- Thanks. We plan on upgrading our devices to 5.x soon. Good to hear that the feature is added in 5.x.

Highlighted

Re: Local admin accounts on PAN firewalls?

The other way in 4.1 is to authenticate through Radius.

In this case there is no need to configure the Local Admin Accounts.

You can use this guide to configure

Microsoft Network Policy Server for Logins.

Cheers

Marco

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!