Hi. At Cisco ISE case, Change at ISE user password then, Windows 10 Input Password input page popuped, but, FR3.x is not popup. below is debug -- Released connection (2) Fri Sep 25 19:55:58 2020 : Debug: (6) modsingle[post-auth]: returned from sql (rlm_sql) Fri Sep 25 19:55:58 2020 : Debug: (6) [sql] = ok Fri Sep 25 19:55:58 2020 : Debug: (6) if (reply:MS-CHAP-Error =~ /E=691 R=0/) { Fri Sep 25 19:55:58 2020 : Debug: No matches Fri Sep 25 19:55:58 2020 : Debug: (6) if (reply:MS-CHAP-Error =~ /E=691 R=0/) -> FALSE Fri Sep 25 19:55:58 2020 : Debug: (6) modsingle[post-auth]: calling attr_filter.access_reject (rlm_attr_filter) Fri Sep 25 19:55:58 2020 : Debug: %{User-Name} Fri Sep 25 19:55:58 2020 : Debug: Parsed xlat tree: Fri Sep 25 19:55:58 2020 : Debug: attribute --> User-Name Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EXPAND %{User-Name} Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: --> user01 Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Matched entry DEFAULT at line 1 Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Cleartext-Password" allowed by 0 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=02fa5a91d12763de0ebb5702753e7402 V=3 M=Authentication rejected" allowed by MS-CHAP-Error =* "" Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: MS-CHAP-Error = "\006E=691 R=1 C=3ffb7931c560572bb7e802f970f89497 V=3 M=Authentication failed" allowed by MS-CHAP-Error =* "" Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "MS-CHAP-Error" allowed by 1 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: EAP-Message = 0x04060004 allowed by EAP-Message =* 0x Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "EAP-Message" allowed by 1 rules, disallowed by 0 rules Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Message-Authenticator = 0x00000000000000000000000000000000 allowed by Message-Authenticator =* 0x Fri Sep 25 19:55:58 2020 : Debug: (6) attr_filter.access_reject: Attribute "Message-Authenticator" allowed by 1 rules, disallowed by 0 rules -- Thanks