| 4.5 |  | The Cisco IOS Firewall Authentication Proxy |
| 4.5.4 |  | HTTPS authentication proxy |

| In Cisco IOS Release 12.2(15)T, the support of HTTPS Authentication Proxy feature allows a user to encrypt the change of the username and password between the HTTP client and the Cisco IOS router via Secure Socket Layer (SSL) when authentication proxy is enabled on the Cisco IOS firewall, thereby ensuring confidentiality of the data passing between the HTTP client and the Cisco IOS router.

Before configuring the HTTPS server, the following procedures must be performed:

- Configure the authentication proxy for AAA services by enabling AAA and configuring a RADIUS or TACACS+ server. For information on completing these tasks, refer to the previous section.
- Obtain a certification authority (CA) certificate. For information on completing this task, refer to the CA configuration in Chapter 6.

Afterwards, the configuration steps are shown in Figure . To verify and debug the HTTPS authentication proxy configuration, perform the following optional steps shown in Figure .

| Web Links http://www.cisco.com/en/US/products/ sw/iosswrel/ps5012/products_feature _guide09186a0080146562.html