Have you had any experience w/ the following:
Citrix Users accessing our Citrix Servers externally are first prompted w/ Firewall Authentication before authenticating on the Citrix Farm. If a user's password has expired he/she will be unable to authenticate. The user then has to contact the Helpdesk for assistance w/ his/her password. We had the same issue w/ our VPN Concentrator. We had to enable Radius w/ Expiry to resolve that issue. Do you know of anything within the PIX or ACS that would allow a user to change his/her password after it has expired. Thanks in advance for your assistance.