PIX site to site vpn and MS IAS

[dchu04]

I have setup site to site VPN connections using PIX firewall. I am trying to setup cut-through proxy to control HTTP access from inside each site. When I setup MS IAS for authentication, I notice that radius must be setup for PAP (clear text), obviously a security risk when users are authenticating through the firewall over the Internet. Is there a way to configure the pix to authenticate to the IAS server through the site to site VPN?

Note: I don't want to buy ACS server.

[jmia]

David,

Have you read the following document as a guide :

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800b6099.shtml

Jay

[dchu04]

In the document it uses PAP as follow

"Click Edit Profile and go to the Authentication tab. Under Authentication Methods, make sure only Unencrypted Authentication (PAP, SPAP) is checked."

Well, it is exactly what I am trying to avoid.