topic Re: Cisco FTD Password Change in Network Security

Cisco FTD Password Change

Imm — Thu, 27 Jan 2022 10:56:22 GMT

Hello,

We have cisco FTD which is integrated with Active Directory. Also there is configured Remote Access VPN (Anyconnect), Authentication done via AD User. There is problem with password change, when users password is expired, he cannot login into vpn, how I can configure password change through Anyconnect?

Thanks

Re: Cisco FTD Password Change

balaji.bandi — Thu, 27 Jan 2022 11:26:27 GMT

Same way we do CTRL+ALT +delete and change the password ? is this not working ?

Re: Cisco FTD Password Change

Rob Ingram — Thu, 27 Jan 2022 12:20:21 GMT

@Imm Have you enabled Password Management under the AAA settings of the RAVPN Policy?

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/firepower_threat_defense_remote_access_vpns.html#id_manage_pwd

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/217437-configure-ftd-remote-access-vpn-with-msc.pdf

Re: Cisco FTD Password Change

Imm — Thu, 27 Jan 2022 15:12:05 GMT

As I have discovered, I need to change type of integration from LDAP (port 389) to LDAP Over SSL (636)

Is it correct?

Re: Cisco FTD Password Change

Rob Ingram — Thu, 27 Jan 2022 15:23:21 GMT

@Imm if you are using LDAP rather than RADIUS, use LDAPS.

Re: Cisco FTD Password Change

Imm — Thu, 27 Jan 2022 15:25:15 GMT

I can't use Radius, I don't see Radius options in FMC

Re: Cisco FTD Password Change

Rob Ingram — Thu, 27 Jan 2022 15:26:38 GMT

@Imm you can do RADIUS in FMC. In the Remote Access VPN configuration it's referred to as AAA, as per the screenshots in this link.

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/217437-configure-ftd-remote-access-vpn-with-msc.pdf

Re: Cisco FTD Password Change

Imm — Thu, 27 Jan 2022 15:30:16 GMT

Yes, but version of my FMC is 6.6.4

Thanks.

Re: Cisco FTD Password Change

Rob Ingram — Thu, 27 Jan 2022 15:33:02 GMT

@Imm RADIUS/AAA is supported in 6.6.4. Go to Objects > Object Management > RADIUS Server Group to define the RADIUS server and group. You reference this group under the AAA settings.

Re: Cisco FTD Password Change

Imm — Thu, 27 Jan 2022 15:36:55 GMT

Yes, I see. Thanks!