Changing password over GlobalProtect

[Hamid.Saffarzadeh]

Hi team,

Does anybody know if there is any compatibility issue between Palo Alto and Aruba Clearpass for changing users' passwords?

When we use Microsoft NPS, GlobalProtect users will be prompted for changing their passwords when the passwords are expired. However, when we use Aruba Clearpass instead of Microsoft NPS it doesn't work. The only workaround we have found is to use Clearpass in Proxy mode.

Thanks in advance.

[SureshReddyM]

Hi,

As per ClearPass web form cannot change a password in an external identity store.

But using EAP-PEAP, EAP-MSCHAPv2 the password changing works.

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/clearpass/clearpass-integration-gui...

Best Regards,

Suresh