Questions about panorama login account

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L1 Bithead

Questions about panorama login account

I check the panorama dashboard   and  on the  widgetslogged in admins  there have tow admin account login the panorama.

panorama-admin and panorama,so

What is the difference between account panorama admin and panorama ?

and time idle for logged in admins?

 

 

 

Highlighted
L6 Presenter

Under Panorama dashboard widgets, you can see admin userids who are logged in right now. I dont think if you can see their roles under dashboard. If you are seeing below accounts under widgets, then those must be the custom user ids defined under Panorama to login. You can check it under

Panorama tab-->Administrators tab.



Mayur
Highlighted
L1 Bithead

Strange, I can’t see a screenshot I uploaded when I raised a question on the this topic. I checked the administrator account information of panorama, there is only one account: admin
L1 Bithead

these log i college from the firewall,(vm-300) i don't understand  why have two admin account  (panorama-admin and panorama)

the firewall connect to panorama.

admin@Branch> show admins

Admin From Client Session-start Idle-for Session-expiry
---------------------------------------------------------------------------------------------
Panorama-admin 10.186.100.163 Panorama 08/19 16:53:32 191:30:03s 09/18 16:53:32
Panorama-admin 10.186.100.163 Panorama 08/20 17:04:23 167:19:12s 09/19 17:04:23
Panorama-admin 10.186.100.163 Panorama 08/20 17:24:58 166:58:37s 09/19 17:24:58
Panorama-admin 10.186.100.163 Panorama 08/21 18:02:43 142:17:49s 09/20 18:02:43
panorama 10.186.100.163 Panorama 08/20 08:00:22 00:01:06s 09/19 08:00:22
Panorama-admin 10.186.100.163 Panorama 08/19 17:11:47 190:19:21s 09/18 17:11:47
panorama 10.186.100.163 Panorama 08/19 13:15:24 53:22:09s 09/18 13:15:24
* admin 10.186.100.133 CLI 08/27 16:19:22 00:00:00s 09/26 16:19:22

Tags (1)
Highlighted
L6 Presenter

@Felixcao,

 

From the below output. it seems you are seeing "show admins" on the gateway cli as client shown is Panorama.

Now here is the case,

 

As some of the users are logged into Panorama server using userid 'admin' so it is showing admin as Panorama-admin on the firewall Dashboard/cli.

This is expected. This does not mean you have some user configured as Panorama-admin, it is only indicating on gateway side that there is someone logged on Panorama using id admin (Panorama-Admin).

If you configure new userid like Admin1 on the Panorama and someone is logged in using this id on the Panorama then on the gateway side you will find Panorama-Admin1 under show admins command/ on dashboard. You can verify it with other firewall instances as well which are connected to Panorama.

 

You are seeing multiple login entries using Panorama-Admin because there are multiple login using admin userid on the Panorama.



Mayur
Highlighted
L1 Bithead

Hi SutareMayur:

 As some of the users are logged into Panorama server using userid 'admin' so it is showing admin as Panorama-admin on the firewall Dashboard/cli.---That explain i understand。

but these follow log:this account: panorama ---is panorama self login login the firewall?

panorama 10.186.100.163 Panorama 08/19 13:15:24 53:22:09s 09/18 13:15:24

 

Highlighted
L6 Presenter

@FelixcaoThat belongs to Panorama login. As your gateway is connected to Panorama, so Panorama is logged in using that ID on the gateway. That From IP will be your Panorama IP address.

You will find such login under 'show admins' on each gateway which is integrated with Panorama.


Mayur
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!