syncronize admin roles via panaroma to pa-500

[michael_kurmies]

Hi,

we are currently running PAN-OS 3.1.8 on our pa-500s and we are using PAN-OS 4.0.2 on our panaroma server.

Is there any way to create admin-roles on panorama and push them to the devices or must we create each role on any device separately.

Thanks for your help.

[essnet]

I guess one would answer that everyone should connect to Panorama (even local admins), from which they can do their job.

[mschuricht · Accepted solution]

This functionality is not possible today in Panorama. The suggestion to utilize context switch to do device level management is valid and should meet your needs.

Have you looked at doing device level management through Panorama via context switching?

[cory_peterson]

The problem with the Context view is how slow it is. Switching between contexts even with 4.1 is extermely slow. Until this is fixed I do not see device configuration through panorama as a viable option. The ability to push Admin Roles and Authentication methods from panorama to the firewalls is something that needs to be added.