Palo Alto Firewall Version 10.2.0: How to onfigure Password Profile

1.Goal of the article

In this article, techbast will guide you how to configure Password Profile so that you can set password restrictions for administrator accounts.


We will have 2 configuration steps: create a Password Profile and assign this Password Profile to the admin account we want to apply.

2.1. Create Password Profile

To create Password Profile we go to Device > Password Profile click Add and we will have the following parameters:

  • Name: Name Password Profile to distinguish
  • Required Password Change Period (days): Require that administrators change their password on a regular basis specified a by a number of days (range is 0 to 365). For example, if the value is set to 90, administrators will be prompted to change their passwords every 90 days. You can also set an expiration warning from 0 to 30 days and specify a grace period.
  • Expiration Warning Period (days): If a required password change period is set, this setting can be used to prompt the user to change their password at each login as the forced password change date approaches (range is 0 to 30).
  • Post Expiration Admin Login Count: Allow the administrator to log in a specified number of times after their account has expired. Example, if the value is set to 3 and their account has expired, they can log in 3 more times before their account is locked out (range is 0 to 3).
  • Post Expiration Grace Period (days): Allow the administrator to log in the specified number of days after their account has expired (range is 0 to 30).
  • After configuring the parameters click OK to save.

Click Commit and OK to save the configuration changes.

2.2. Assign Password Profile to admin account

Note This Password Profile is only assigned to the admin accounts created later, for the default admin account, it cannot be assigned.

To assign us to Device > Administrators.

Click on the admin user name that we want to assign.

In Password Profile we will select the created Password Profile from the list.

Click OK.

Click Commit and OK to save the configuration changes.

Be the first to comment

Leave a Reply

Your email address will not be published.


This site uses Akismet to reduce spam. Learn how your comment data is processed.