Well, having worked with the Netscreen Firewall products, I find it
interesting that you feel its your bottle neck.  Take a look at the
architecture you've outlined:

PC--->NetScreen--->Cable Modem----> VPN Gateway (what type of gateyway is
this?)---->Internet.

The short answer here is that anytime you add security devices to a traffic
flow especially when cipher-decipher takes place, you'll take a performance
hit.  That's the price we pay (though things are improving dramatically!)
for privacy.  NetScreens traditionally are quite fast devices and though the
5X is a smaller appliance its still quite good.

Will Gragido CISSP CCNP CIPTSS CCDA MCP
9450 W. Bryn Mawr Ave.
Suite 325
Rosemont, Il 60018
www.ins.com
[EMAIL PROTECTED]


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 05, 2003 1:24 AM
To: [EMAIL PROTECTED]
Subject: RE: OT-Netscreen 5xp VPN very slow [7:62461]

Hi,

Did you check the NS-5XP log?
Also, if you place your PC behind the NS and access internet, what's the
path of your traffic? Simply PC-> FW-> cable modem-> Internet OR
PC-> FW( VPN gateway ) -> cable modem -> VPN gateway -> Internet?

BUT you mentioned 3DES, if NS is just using as a Firewall, encryption (3DES
and VPN) should not cause your problem.

rgds,
ivan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62500&t=62461
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to