We have set up the web based password change for our VPN users. The users experience 100% success rate when they follow the 8-14 alphanumeric password restrictions that we set. They also have 100% success rate when they use special characters with the exception of the & character. For example if I use mr&4rt! as a password I get a Password too short error. Then I changed the length to 2-14 characters and entered the same password. I get password must be alpha numeric. The & is ending the string of characters for the password. Has anyone ran into this problem or know a solution.