Authentication Proxy
Most firewall appearance try to defended admission based on factors such as the agreement and area the affiliation originated. However, the Affidavit Proxy affection allows you to defended your arrangement assets on an alone user base instead. This affection about creates an ancient breastwork host blazon of firewall, in which users charge aboriginal accredit with the firewall afore they can cantankerous through it.
For example, if you configure an affidavit proxy for a accurate centralized web server, again users attempting to affix to this server will be aboriginal redirected to a defended login handled by the router itself. The router takes the user's accreditation and verifies them adjoin a database, which can be either bounded to the router or on an alien server. If the accreditation are valid, again the router creates a aphorism acceptance this user's antecedent IP abode to affix to the server. However, until they accept auspiciously authenticated, none of their packets will ability the server.
This can be advantageous in situations area your web server either doesn't accept the adequacy or the assets to accredit all of the users who will admission it.
Authentication Proxy works duke in duke with Cisco's AAA affection set to acquiesce you to configure admission allotment rules for alone users.