I'm in search of software alternatives to the Netwrix Password Policy Enforcer (PPE). There are so many different password management tools out there, but most of them seem to focus on PAMs and password managers instead of dedicated Active Directory (AD) password policy solutions. I've found PPE to be a solid option, especially since it allows for a manual download of the HIBP database, but I've heard some negative things about Netwrix as a company. Since we're aiming to comply with CMMC Level 2 requirements and have specific ITAR obligations, we need a solution that works on-prem, and we're not interested in moving to the cloud unless absolutely necessary. I looked at SafePass.me, but it only checks against HIBP and lacks the functionality that PPE offers. Are there any other alternatives out there?
5 Answers
Specops is another option worth checking out. It's not entirely on-prem, but it might fit your needs. You can find more about it on their website, although you might feel limited on cloud aspects.
Good luck! It can be challenging to find the right fit.
You might want to look into Entra, which has capabilities for password protection. However, you mentioned that Entra isn't an option for you due to your specific compliance needs and the costs associated with GCC High. Just a heads up, though—Entra is primarily a cloud solution.
Yeah, that makes sense. I hear you on the cloud services; sometimes on-prem is the way to go.
Exactly! We're trying to limit cloud usage as much as possible.
Just to note, you don't strictly have to go with GCC High to maintain compliance. Some users have successfully kept CUI out of M365 using enclave services. That could potentially save you some costs and still meet your requirements.
Yeah, but management isn't keen on that route either—they're pretty set on staying on-prem.
Got it, hope you find a suitable alternative!
NFront has a password filter service you might want to investigate. You can also search through forums for discussions on 'password filter' and 'Anixis', who used to own PPE. They might offer something useful.
I checked out SafePass.me, but it seems to only provide password checks against the HIBP database. It lacks a lot of features compared to what Netwrix offers, like comprehensive policy management.
Thanks for the tip! I think I’ll keep looking for something that covers more ground.
Yeah, unfortunately, that one's pretty limited.
Thanks! I’ll look into Specops and see if it can work for us.