pfSense

I know the recommended action if you want password controls/password policy is to use an external authentication server, but for PCI/SOC2 compliance, they REALLY want to see even local break-glass accounts that also have password policies. I feel like it would be somewhat easy to implement a password policy for local users and there are plenty of examples of it being implemented out there. Other appliances seem to have no issue providing password policies for local users while also supporting external authentication servers.

For the sake of compliance and Netgate offering businesses a great low-cost/high-feature and function firewall product, this feature would be incredibly nice to have.

Thanks!