Can you configure Radius/TACACS+/LDAP authentication to access a dedicated log collector?
11004
Created On 05/17/20 11:36 AM - Last Modified 03/24/23 18:46 PM
Question
Can you configure Radius/TACACS+/LDAP authentication to access a dedicated log collector?
Environment
- PAN-OS 8.1. 9.0 and 9.1
- Panorama is configured in logger mode (Dedicated Log Collector)
Answer
- A dedicated Log collector does not support external Authentication.
- External Authentication methods such as LDAP, Radius, TACACS+ are not supported on PAN-OS 9.1 and below.
- TACACS+ is supported starting on PAN-OS 10.0 and above.
- The only authentication method supported is Local Authentication. Note that only the default "admin" user is supported.
Additional Information
TACACS+ is supported starting on PAN-OS 10.0 and above.
Panorama Features PAN-OS 10.0
| Enhanced Authentication for Dedicated Log Collectors and WildFire Appliances | Dedicated Log Collectors and WildFire appliances now support multiple local admins with granular authentication parameters, as well as remote authentication and authorization leveraging LDAP, RADIUS, or TACACS+ to enable central user management and ensure audit compliance. You can create and manage Log Collector and WildFire admins from the Panorama management server. |