Cisco Network Assistant in SSH environment?

[usanitary]

We have sevral 2950s I recently upgraded IOS and configed to only permit SSH. Since security is the concern, I also did 'no ip http server'. Unfortunately now Cisco Network Assistat does not work (no SSL on that IOS).

How can I utilize CNA in this environment?

[Edison Ortiz]

If you disable http server, CNA won't work. If you want to secure http, create an access-list for http server to only accept http requests from specific hosts.

[agonza07]

Once "transport input ssh" in placed under the VTY lines, there is no access to the http server. Is there a way to only allow SSH on the lines but also allow the web server interface to be active, besides allowing telnet sessions?

Thanks.