It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda SSL VPN

What pattern matching type does the built-in user database password pattern use on my Barracuda SSL VPN? How can I enforce password complexity rules on my Barracuda SSL VPN?

  • Type: Knowledgebase
  • Date changed: 2 years ago
Solution #00003735

This solution applies to Barracuda SSL VPNs, all firmware versions.

For the built-in user database password pattern, the Barracuda SSL VPN uses regular expressions.

Regular expressions are powerful pattern matching tools used to parse characters and text. For instance, the Barracuda SSL VPN performs regular expression checking on users added to the built-in database to ensure that a given password meets basic complexity requirements. By default, this is a minimum of 5 characters, as defined by the regular expression ?.{5,}?. The pattern starts with a dot, which will match against any character one time. Then we have {5,} which means match the previous character 5 or more times (the comma is the more times part).

A more complex password checking pattern might be similar to the following: '(?=.*[a-z])(?=.*[A-Z])(?=.*\W).{5,}'. This will require that a password is at least five characters long, with at least one capital and at least one symbol anywhere in the password.

The ?= instructs the regular expression engine to perform a forward look up, which means that the expression will match in any order in the string of characters, rather than the default order in which the expression was entered. The expression then checks for one or more lowercase characters (.*[a-z]), one or more uppercase characters (.*[A-Z]) and one or more non-letter characters (.*\W). Then the expression applies to all of this a limit of 5 or more characters (.{5,}).

Additional Notes:
The Barracuda SSL VPN implements the pattern class from the 1.4.2 JDK to perform this function, and there is documentation available from Sun Microsystems to which you can refer for a full list of the parameters available for regular expressions.

Link to This Page: