can ASA require password change from users?

[ofir]

is there a way to automate password changes every X time?

currently I have to manually change passwords and then update the users. it is a big deal and cause us to keep the same passwords too long...

[eddie.mitchell]

http://www.cisco.com/en/US/docs/security/asa/asa71/command/reference/p_711.html#wp1643267

[ofir]

that would require a RADIUS server which I do not have

we're using local database on the ASA

[eddie.mitchell]

Sorry about that. I don't think this can be accomplished using local user accounts.

[ofir]

any tips\recommendations on setting up a basic RADIUD server?

also, does ASA capable of forcing complex passwords or just the expiration date?

if not, I'll need RADIUS to apply the policy

[ofir]

do you know if Microsoft's IAS is a valid working RADIUS solution for ASA's authentication?

that way I can use AD security policy and Domain users.

[acomiskey]

Yes, IAS works well.