Hi Ray, we don't have that much VPN traffic, just a couple of SecuRemote users and one site-to-site VPN with very little traffic. That's why I was wondering. We use AES for SecuRemote, the site-2-site uses 3DES. I will just turn it on and see what happens.
As for what card it is, no idea. Thanks for the info! Regards, Sascha |> -----Original Message----- |> From: Mailing list for discussion of Firewall-1 |> [mailto:[EMAIL PROTECTED] On |> Behalf Of Ray Pesek |> Sent: Thursday, May 06, 2004 10:39 PM |> To: [EMAIL PROTECTED] |> Subject: Re: [FW-1] nokia crypto hardware accelerator |> |> According to the spec sheet I remember, a crypto card (Nokia |> Accelerator II) |> will increase the VPN throughput something like ten times. |> |> However, the II card does not support IKE acceleration |> whereas the III card |> will (if it is out yet). |> |> We use Visitor Mode so it should help us there. If you use |> AES, you don't |> really need it. If you use DES/3DES, you need it. |> |> But it all depends on how much crypto traffic you have. If |> you've already |> paid for it, enable it. Is it the Broadcom (Nokia |> Accelerator) card or the |> Luna card? |> |> "Flows" is a thing Nokia came up with to increase total |> firewall throughput. |> I believe it is enabled by default unless you're using |> FloodGate. With |> FloodGate, it's incompatible and turned off by default. |> |> Ray |> |> |> >From: Sascha Picchiantano <[EMAIL PROTECTED]> |> >Reply-To: Mailing list for discussion of Firewall-1 |> ><[EMAIL PROTECTED]> |> >To: [EMAIL PROTECTED] |> >Subject: [FW-1] nokia crypto hardware accelerator |> >Date: Thu, 6 May 2004 13:49:35 +0200 |> > |> >Hi there, |> > |> >I only now stumbled across the fact that the Nokias we use |> here have an |> >onboard hardware cryptographic accelerator for VPN-1. That |> feature was |> >turned off by default. |> > |> >How can I make use of it? Simply turn it on? How will VPN-1 |> get to know |> >about it and make use of it? |> > |> >Any hints appreciated, |> > |> >thanks, |> >Sascha |> > |> >================================================= |> >To set vacation, Out-Of-Office, or away messages, |> >send an email to [EMAIL PROTECTED] |> >in the BODY of the email add: |> >set fw-1-mailinglist nomail |> >================================================= |> >To unsubscribe from this mailing list, |> >please see the instructions at |> >http://www.checkpoint.com/services/mailing.html |> >================================================= |> >If you have any questions on how to change your |> >subscription options, email |> >[EMAIL PROTECTED] |> >================================================= |> |> _________________________________________________________________ |> Mother's Day is May 9. Make it special with great ideas from |> the Mother's |> Day Guide! http://special.msn.com/network/04mothersday.armx |> |> ================================================= |> To set vacation, Out-Of-Office, or away messages, |> send an email to [EMAIL PROTECTED] |> in the BODY of the email add: |> set fw-1-mailinglist nomail |> ================================================= |> To unsubscribe from this mailing list, |> please see the instructions at |> http://www.checkpoint.com/services/mailing.html |> ================================================= |> If you have any questions on how to change your |> subscription options, email |> [EMAIL PROTECTED] |> ================================================= |> ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
