According to the spec sheet I remember, a crypto card (Nokia Accelerator II) will increase the VPN throughput something like ten times.
However, the II card does not support IKE acceleration whereas the III card will (if it is out yet).
We use Visitor Mode so it should help us there. If you use AES, you don't really need it. If you use DES/3DES, you need it.
But it all depends on how much crypto traffic you have. If you've already paid for it, enable it. Is it the Broadcom (Nokia Accelerator) card or the Luna card?
"Flows" is a thing Nokia came up with to increase total firewall throughput. I believe it is enabled by default unless you're using FloodGate. With FloodGate, it's incompatible and turned off by default.
Ray
From: Sascha Picchiantano <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [FW-1] nokia crypto hardware accelerator Date: Thu, 6 May 2004 13:49:35 +0200
Hi there,
I only now stumbled across the fact that the Nokias we use here have an onboard hardware cryptographic accelerator for VPN-1. That feature was turned off by default.
How can I make use of it? Simply turn it on? How will VPN-1 get to know about it and make use of it?
Any hints appreciated,
thanks, Sascha
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
_________________________________________________________________ Mother�s Day is May 9. Make it special with great ideas from the Mother�s Day Guide! http://special.msn.com/network/04mothersday.armx
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
