Issue Updating Local Administrator Passwords via Panorama - Seeking Community Assistance

[Arjun_Rajeev]

Greetings Community Members,

I'm currently facing a challenge while attempting to update the local administrator passwords from Panorama and then pushing the changes to our firewalls. The process involves modifying the password by selecting a device template, select the administrators, and update the password. Subsequently, I commit the changes to Panorama and proceed to push them to the devices. Following this process, all devices are reported to be in sync from the Managed Devices summary.

However, I've encountered a situation where the new password doesn't seem to take effect when trying to log in to the firewall. Surprisingly, the old password is still accepted. Given my limited experience with Palo Alto Networks, I am reaching out to the community for guidance to understand and resolve this issue.

Currently, I am updating the password individually on both Panorama and the individual devices. I'm curious if there is a more efficient way to accomplish this task.

Your valuable insights and assistance would be greatly appreciated. Thank you for your time and support.

[PavelK]

Hello @Arjun_Rajeev

when you use Panorama's template to update local Firewall password you might be experiencing what is described in this KB: Update the Local admin" User Password Using Panorama Templates". Could you check whether you see an override icon next to local admin account? You can manually override local configuration with Panorama's Template configuration without using the option to force template values.

Kind Regards

Pavel