«

Several clients of mine have PIX firewalls that they also use as VPN
concentrators. Users are authenticated against a Windows domain via
Microsoft's IAS (RADIUS) server.

The problem they're having is the VPN users do not get notification of
pending Windows domain password expiration.

Support of this is called "RADIUS with Expiry" by Cisco and is
supported by their VPN client and the VPN 3000 server. However, I can
find no evidence of support for this on the PIX.

So, for those of you out there with similar configurations, how do you
deal with Windows domain password expiration with a PIX VPN
concentrator?

Thanks,
Eric