Post Expiration Admin Login Count

[Mohd_Asraf]

Hello expert,

I wanted to check if someone encountered same issue as mine.

We did configure password profiles in our PA-820 (version 10.2.9) by enabling "Post Expiration Admin Login Count" to 3 times.

Somehow, after password was expired it just straight away locked the ID and didn't allow us to login 3 times as configured.

,

Please advise if our configuration was done correctly.

Thank you.

[JayGolf]

Hi @Mohd_Asraf ,

Password profiles override any Minimum Password Complexity settings defined in Device -> Setup -> Management. I would check the specific administrator in question and view the password profile assigned to that admin account. Next, verify that the password profile assigned to the admin account does in fact have 3 entered on Post Expiration Admin Login Count. It might be that the admin account has a password profile assigned to it that doesn't have 3 defined.