FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
acvaldez
Staff
Staff
Article Id 208797
Description

This article describe how to configure admin account password expiration on FortiWeb and to explain what is the expected behavior after setting it.

Scope FortiWeb.
Solution

Using CLI:

 

# config system password-polic

  set status enable

  set expire-status enable

  set expire-day 1

end

 

status {enable | disable} (DEFAULT disable)

 

- Enable to enforce password rules for administrator accounts.

When rules are configured for the password policy, administrator accounts that do not adhere  to the password policy will be prompted to update their password upon logging in.

For some cloud platforms such as AWS, Azure, and GCP, etc., it is enabled by default.

 

expire-status {enable | disable} (DEFAULT disable)

 

- Enable password expiration.

 

expire-day <expire-day_int> (DEFAULT 90)

 

- Enter the valid period for the password. The valid range 1–999 days

 

Behavior

 

- Then, once the configured number is already hit of expire days, it is necessary tochange password on the next logon in FortiWeb.

Contributors