Fortinet 5.0 Patch 6 - page 214

Fortinet 214 FortiWeb 5.0 Patch 6 Administration Guide
Password Type a password for the administrator account.
This field is available only when Type is Local User.
Tip: Set a strong password for every administrator account, and
change the password regularly. Failure to maintain the password of
every administrator account could compromise the security of your
FortiWeb appliance. As such, it can constitute a violation of PCI DSS
compliance and is against best practices. For improved security, the
password should be at least eight characters long, be sufficiently
complex, and be changed regularly. To check the strength of your
password, you can use a utility such as Microsoft’s password strength
meter.
Confirm Password Re-enter the password to confirm its spelling.
This field is available only when Type is Local User.
Admin User Group Select a remote authentication query set. See “Grouping remote
authentication queries for administrators” on page 218.
This field is available only when Type is Remote User.
Caution: Secure your authentication server and, if possible, all query
traffic to it. Compromise of the authentication server could allow
attackers to gain administrative access to your FortiWeb.
Setting name Description