SSLVPN user can change password for first login

Hello

Hope the following link helps.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Password-expiration-policy-for-SSL-VPN-local-user/ta-p/192723

If this doesn't help, I think you still can play with password policy to force user change password on first login, e.g.: you set password with 10 characters, then you apply policy with minimum 12 characters. I think this should work.

But there is a better solution: in my organisation we use LDAP user database for SSL VPN, not FG local users. If you can do this I think this is much better, and you don't worry anymore for password management.

Hello @MustphaBassim  ,

Thank you for contacting the Fortinet Forum portal.

Please refer to the below article, these are few options with free forticlient :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-allow-LDAP-user-to-change-password-at-first/ta-p/243530

https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/688719/ssl-vpn-with-ldap-user-password-renew

Best regards,

Manasa.

If you feel the above steps helped to resolve the issue mark the reply as solved so that other customers can get it easily while searching on similar scenarios.

I think using a mix of letters, numbers, and symbols is key. But it's not just about complexity; it's about uniqueness too. Each account deserves its own special password—none of that one-size-fits-all nonsense. And maybe throw in a passphrase that means something to you but is tough for others to guess.

The idea of a "strong password" has never felt more crucial. I remember when I used to think "password123" was clever—boy, was I wrong! Learning about these vulnerabilities really makes you rethink how you protect your online stuff.