Cisco Systems This document defines a security mechanism for the COPS protocol based on Generic Security Service Application Program Interface framework [RFC 2078]. The COPS policy server (Policy Decision Point or PDP) and the policy client (Policy Enforcement Point or PEP) can use the security mechanism defined in this draft for mutual authentication and for exchanging integrity protected messages with replay protection.