Access Domain Enhancements for Multi-Tenancy

Allows Panorama™ administrators to view configuration and system logs, as well as some firewall functions and tasks, in multi-tenant environments.
To provide further visibility in to multi-tenant environments, PAN-OS 10.0 introduces the ability for Device Group and Template (DG&T) admins to view the configuration and systems logs for devices within their access domain. Additionally, DG&T admins can also view firewall configuration operations (partial commit, load, and revert), as well as monitor the Application Command Center (ACC) to gain additional visibility into the network traffic activity for devices in the access domain. To gain additional visibility, both the Panorama management server and the managed device must both be running PAN-OS 10.0, and the DG&T admin access domain can only include up to 256 managed devices. The DG&T admin is unable to view the logs, view configuration operations, or monitor the ACC for the devices in the access domain if the number of managed devices in the access domain exceeds 256 devices.
  1. Select
    Commit
    Commit to Panorama
    and
    Commit
    your configuration changes.
  2. Manage the firewalls in the access domain.
    1. Log in to the Panorama Web Interface using the DG&T admin credentials you created.
    2. Select
      Monitor
      Logs
      Configuration
      or
      Monitor
      Logs
      System
      to view the configuration or system logs for the managed firewalls in the access domain.
    3. Select
      Panorama
      Config Audit
      and compare the configuration changes for managed firewalls in your access domain.
    4. Context switch to a managed firewall to perform firewall operations.
      • Select
        Device
        Setup
        Operations
        to
        Reboot Device
        or
        Shutdown Device
        .
      • Select
        Device
        Support
        to
        Generate Tech Support File
        or
        Generate Stats Dump File
        .

Recommended For You