We currently use PPE and have had a pretty good experience with it. We recently enabled passphrases and wanted to make sure that certain characters weren’t used as they conflict with some of our other applications. These characters are specifically # ? and space.
I’ve looked through the PPE UI and I don’t see anywhere to deny these options. I see under characters (complexity) where I can require them, however.
My thought process was to add an additional dictionary file with each one of those above, but am unsure if that would work as intended, so reaching out to the community to see if they have any ideas or if I’m perhaps missing something simpler.
Based on what you are looking to accomplish, this can be achieved through the utilization of the Characters (Granular) rule in a PPE Policy. In the Characters (Granular) rule, you are able to designate the “Not contain” option and the characters button to assign the specific characters you wish to have included in the rule. For this example I used the Custom portion of the Characters (Granular) Rule:
Then I set the first box to “Not Contain”, second box to “in position” and positions “1” and “64”. Currently 64 is the highest position we can specify. This will reject a password containing #, ? or SPACE in any position between 1 and 64 in a password.
The reason I used “in position” instead of “embedded” option is because “embedded” will only reject these characters in a password if it is inside the password, so the first and last character(s) in a password will not count, so for example if using “embedded” the password “#PasswordExample” or “PasswordExample#” will still be accepted and “Password#Example” will not be accepted.
When using “in position”“1”-“64”, all three examples will be rejected. (“#PasswordExample” or “PasswordExample#” or “Password#Example”).
Unfortunately, when i go into PPE and the characters (Granular) section, i do not have the option for “custom”. I can repurpose the “special” option and can set it up almost exactly as in your screencap. Out of curiosity, what version is your screencap? I look to be on 11.0.2.2.
11.0.5.5, the Custom option is further down the page. Scrolling does not work, you need to hover on the right side of the screen to get the bar and drag it down to go down the page:
