AD password expiration prompt in anyconnect

[Paweł Kordysz]

Hi, 

I have Firepower 1140 with Anyconnect license. VPN users are from AD (by LDAP). Everything it's ok, but when user have expired password don't connect - users see error  "Inwalid user or password". When I had ASA, users when their password is expiered see prompt to change password.

Firepower is managed by FDM.

It's possible to set change AD user password when it's expiered option?

[Rob Ingram]

@Paweł Kordysz enable the "Password Managment" option to prompt the user the password is expirying.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/730/management-center-device-config-73/vpn-remote-access.html

[Paweł Kordysz]

I don't see Password Management option

[Rob Ingram · Accepted solution]

@Paweł Kordysz what version are you running? This feature was introduced in 7.1

https://www.cisco.com/c/en/us/td/docs/security/firepower/710/relnotes/firepower-release-notes-710/features.html

[Paweł Kordysz]

I upgraded to version 7.2 and it's working. Thank you for your help @Rob Ingram