To secure the local administrator account, you can define password complexity requirements that are enforced when administrators change or create new passwords. Unlike password profiles, which can be applied to individual accounts, the password complexity rules are firewall-wide and apply to all passwords.

To enforce periodic password updates, create a password profile that defines a validity period for passwords.

Configure Panorama Password Profiles and Complexity
Configure minimum password complexity settings.	Select Panorama > Setup > Management and edit the Minimum Password Complexity section. Select Enabled. Define the Password Format Requirements. You can enforce the requirements for uppercase, lowercase, numeric, and special characters that a password must contain. To prevent the account username (or reversed version of the name) from being used in the password, select Block Username Inclusion (including reversed). Define the password Functionality Requirements. If you have configured a password profile for an administrator, the values defined in the password profile will override the values that you have defined in this section.
Create password profiles. You can create multiple password profiles and apply them to administrator accounts as required to enforce security.	Select Panorama > Password Profiles and click Add. Enter a Name for the password profile and define the following: Required Password Change Period: Frequency, in days, at which the passwords must be changed. Expiration Warning Period: Number of days before expiration that the administrator will receive a password reminder. Post Expiration Grace Period: Number of days that the administrator can still log in to the system after the password expires. Post Expiration Admin Login Count: Number of times that the administrator can log in to the system after the password has expired.

Document:Panorama™ Administrator’s Guide

Configure Panorama Password Profiles and Complexity

Table of Contents

Recommended For You

Recommended Videos