nFront Password Filter rejects non-compliant passwords before they are allowed on your network. Gone are the days of running a password cracker nightly to see if key accounts can be cracked.
Each Domain Controller runs nFront Password Filter and there are NO API CALLS THAT LEAVE THE DOMAIN CONTROLLER! Thus, there is no dependency on other "password policy servers." When the T1 to corporate is down, any local DC can filter the password change and support the nFront Password Filter Clients. Competing solutions rely on "password policy servers" so they subject the password change process to network latency and do not guarantee the passwords are filtered if the "password policy server" is not reachable. With other solutions, be sure to read the disclaimers and micetype.
Notice that with other products you have to load their snap-in or executable on your system to control policy settings. nFront Password Filter uses a Group Policies and requires only that you load the provided ADM template one time on 1 domain controller. From there, the GPO replicates and can be administered from any domain controller and workstation using Active Directory Users and Computers or the Group Policy Management Console.
nFront Password Filter is controlled via Group Policies. No fancy front ends. No pretty MMC snap-ins to forget to load. Simply create a new GPO, load our template file and it replicates to ALL domain controllers. You can then manage from any domain controller or workstation where you can run Active Directory Users and Computers. While the software is controlled via GPO the policies are linked to groups of users. Competitors allow you to put password policy GPOs all over the place. If you have ever had to troubleshoot GPO issues with RSoP and other tools you know it is not fun. With nFront Password Filter, all policy configurations are controlled from one single GPO and policies are linked to existing groups which you already use to control access to data. Nothing could be simpler and easier to troubleshoot or maintain. Don't just take our word for it, read some of the product testimonials.
nFront Password Filter allows you to dynamically upgrade the filtering engine without rebooting your domain controllers.
Our filtering engine has been tested by a Fortune 100 customer with over 11,000 password changes per minute. If it can handle that volume, it should surely spend most of its time sleeping on your network.
Competitors use cumbersome GUI tools to manipulate the dictionary "wordlists." nFront Password Filter gives you full control and allows you to directly edit the dictionary.txt file in any ANSI-compatible editor (like Notepad). You can even add words from different languages and mix words of different languages. We have many worldwide customers who use many languages in the dictionary file. We also have many customers which use the dictionary to block keywords disallowed by applications like SAP and Peoplesoft.
We can scan a new password against over 2.5 million words in less than a single second. So now you can take all those hacking wordlists and throw them into our dictionary file.