AnyConnect VPN Local Account Password Expiration

[adil.nasser3]

Hello All,

I have configured a new vpn profile set up (new tunnel-group, group-policy, and local accounts).  I would like to set the local accounts to expire after a certain period of time and force the user to change their password periodically.  Is this possible for local accounts configured in the ASA?

Adil

[rvarelac]

Hi Adil, 

Unfortunately , using the local database this is not possible,  you can specify the VPN access-hours and Session-timeout.  However the password will never expire or force the user to change it. 

This feature is only available using RADIUS, TACACS or LDAP for authentication .

http://www.cisco.com/c/en/us/support/docs/network-management/remote-access/116757-config-asa-remote-00.html

Hope it helps

-Randy-