Questions about panorama login account

[Felixcao]

I check the panorama dashboard   and  on the  widgetslogged in admins  there have tow admin account login the panorama.

panorama-admin and panorama,so

What is the difference between account panorama admin and panorama ?

and time idle for logged in admins?

[SutareMayur]

Under Panorama dashboard widgets, you can see admin userids who are logged in right now. I dont think if you can see their roles under dashboard. If you are seeing below accounts under widgets, then those must be the custom user ids defined under Panorama to login. You can check it under

Panorama tab-->Administrators tab.

[Felixcao]

Strange, I can’t see a screenshot I uploaded when I raised a question on the this topic. I checked the administrator account information of panorama, there is only one account: admin

[Felixcao]

these log i college from the firewall,(vm-300) i don't understand  why have two admin account  (panorama-admin and panorama)

the firewall connect to panorama.

admin@Branch> show admins

Admin From Client Session-start Idle-for Session-expiry
---------------------------------------------------------------------------------------------
Panorama-admin 10.186.100.163 Panorama 08/19 16:53:32 191:30:03s 09/18 16:53:32
Panorama-admin 10.186.100.163 Panorama 08/20 17:04:23 167:19:12s 09/19 17:04:23
Panorama-admin 10.186.100.163 Panorama 08/20 17:24:58 166:58:37s 09/19 17:24:58
Panorama-admin 10.186.100.163 Panorama 08/21 18:02:43 142:17:49s 09/20 18:02:43
panorama 10.186.100.163 Panorama 08/20 08:00:22 00:01:06s 09/19 08:00:22
Panorama-admin 10.186.100.163 Panorama 08/19 17:11:47 190:19:21s 09/18 17:11:47
panorama 10.186.100.163 Panorama 08/19 13:15:24 53:22:09s 09/18 13:15:24
* admin 10.186.100.133 CLI 08/27 16:19:22 00:00:00s 09/26 16:19:22

[SutareMayur]

@Felixcao,

From the below output. it seems you are seeing "show admins" on the gateway cli as client shown is Panorama.

Now here is the case,

As some of the users are logged into Panorama server using userid 'admin' so it is showing admin as Panorama-admin on the firewall Dashboard/cli.

This is expected. This does not mean you have some user configured as Panorama-admin, it is only indicating on gateway side that there is someone logged on Panorama using id admin (Panorama-Admin).

If you configure new userid like Admin1 on the Panorama and someone is logged in using this id on the Panorama then on the gateway side you will find Panorama-Admin1 under show admins command/ on dashboard. You can verify it with other firewall instances as well which are connected to Panorama.

You are seeing multiple login entries using Panorama-Admin because there are multiple login using admin userid on the Panorama.

[Felixcao]

Hi SutareMayur：

 As some of the users are logged into Panorama server using userid 'admin' so it is showing admin as Panorama-admin on the firewall Dashboard/cli.---That explain i understand。

but these follow log：this account： panorama ---is panorama self login login the firewall？

panorama 10.186.100.163 Panorama 08/19 13:15:24 53:22:09s 09/18 13:15:24

[SutareMayur]

@FelixcaoThat belongs to Panorama login. As your gateway is connected to Panorama, so Panorama is logged in using that ID on the gateway. That From IP will be your Panorama IP address.

You will find such login under 'show admins' on each gateway which is integrated with Panorama.