syncronize admin roles via panaroma to pa-500

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

syncronize admin roles via panaroma to pa-500

Not applicable

Hi,

we are currently running PAN-OS 3.1.8 on our pa-500s and we are using PAN-OS 4.0.2 on our panaroma server.

Is there any way to create admin-roles on panorama and push them to the devices or must we create each role on any device separately.

Thanks for your help.

1 accepted solution

Accepted Solutions

L4 Transporter

This functionality is not possible today in Panorama. The suggestion to utilize context switch to do device level management is valid and should meet your needs.

Have you looked at doing device level management through Panorama via context switching?

View solution in original post

3 REPLIES 3

L4 Transporter

I guess one would answer that everyone should connect to Panorama (even local admins), from which they can do their job.

L4 Transporter

This functionality is not possible today in Panorama. The suggestion to utilize context switch to do device level management is valid and should meet your needs.

Have you looked at doing device level management through Panorama via context switching?

The problem with the Context view is how slow it is. Switching between contexts even with 4.1 is extermely slow. Until this is fixed I do not see device configuration through panorama as a viable option. The ability to push Admin Roles and Authentication methods from panorama to the firewalls is something that needs to be added.

  • 1 accepted solution
  • 2088 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!