Force VPN Users to Change Password

[whisperwind]

Scenario:

-asa providing remote access vpn capabilities to customers users

-customer wants 50 users added for vpn

-customer does not want to make 50 passwords for users

-customer does not want to know the user passwords

Question 1:

Can the ASA be configured such that when the vpn user first connects they are asked to change their password?

Question 2:

If Q1 is possible is there a way to enforce strong passwords, like length for example? Router IOS can do this can the ASA?

[cisco24x7]

"Can the ASA be configured such that when the vpn user first connects they are asked to change their password? "

Yes, with RSA SecurID next PIN mode

"If Q1 is possible is there a way to enforce strong passwords, like length for example? Router IOS can do this can the ASA?"

Yes, again with RSA SecurID token code

CCIE Security