I am be wrong... but for multiple cpus...you have to get an MPU license..on the old VPN-1 products.
For accelerator...you need an accelerator card such as VPN Accelerator card III or SecureXL turbocard VPN-1 Accelerator Card III Wire-Speed VPNs are enabled by high performance encryption acceleration for 3DES IPSec/IKE VPN-1 deployments. Requires a licensed copy of 3DES VPN-1 Pro. Also offloads CPU for IKE session setup and SSL processing. Requires an available PCI slot on the Gateway Server. The VPN Accelerator Card III can achieve up to 400Mbps IPSec-3DES performance. SecureXL Turbocard A PCI add-in card that delivers multi-gigabit throughput for VPN-1 Pro(3DES, AES) and FireWall-1, across all packet sizes by offloading processor intensive security operations. The card provides three Gigabit Ethernet ports for use in server platforms running SecurePlatform. Requires an available full length PCI slot and a licensed copy of VPN-1 Pro NG with Application Intelligence. http://pricelist.checkpoint.com/sections/Enterprise.asp -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng Sent: Tuesday, March 08, 2005 6:18 PM To: [email protected] Subject: Re: [FW-1] dual CPU versus Quad CPU box for Super Secureplatform Firewall But isn't secureXL thet same thing as secureXL that is also available on IPSO 3.8.1? I understand that secureXL in IPSO replaces "flows" in older IPSO version. I also understand that in both SPLAT and IPSO, I use "fwaccel on" to turn on secureXL. I don't have any special license on the SPLAT box and it let me run the command "fwaccel on"; however when I run the "fwaccel stat", it tells me that the VPN acceleration card is not installed. Are we talking about the same thing here? Gary Scott <[EMAIL PROTECTED]> wrote: Yes, securexl -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Will Zegeer Sent: Tuesday, March 08, 2005 3:31 PM To: [email protected] Subject: Re: [FW-1] dual CPU versus Quad CPU box for Super Secureplatform Firewall Also, doesn't Checkpoint still require a multi-processor license to take advantage of multiple processors? -----Original Message----- From: Kierstead, Wade [mailto:[EMAIL PROTECTED] Sent: Wed 3/2/2005 10:59 PM To: [email protected] Cc: Subject: Re: [FW-1] dual CPU versus Quad CPU box for Super Secureplatform Firewall To me this seems pretty light on the drive space, especially with 40 remotes. We use all HP gear, 148 Gig x 15000 rpm drives. Is the 80 Gig the best Dell offers? -----Original Message----- From: cisco4ng [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 02, 2005 6:16 PM To: [email protected] Subject: [FW-1] dual CPU versus Quad CPU box for Super Secureplatform Firewall I would like to build a super SPLAT box. This box will have 4GB of RAM on it with RAID 1 80GB disk storage. This super SPLAT box will be managed by my provider-1 NG with AI R55W. This box will be a VPN hubs to about 40 remote VPN devices (mainly Cisco Pix and VPN Concentrators) and remote access VPN using AES-256/DH-5/SHA-1. We're talking about 400 Mbps VPN throughput. At the moment, I have the option of going with either a dual CPU machine or a quad cpu machine (dell in both cases). We're talking about Xeon processors With SPLAT, I have the option to use the other CPUs for VPN Encryption/Decryption. What should I go with? Dual Processor or Quad processor box? Can SPLAT take advantage of quad CPU machine or dual CPU can handle the task? I don't see any bench mark testing on dual versus quad CPU box on SPLAT. Thanks. P.S. We're talking about redundancies in this configuration and we might talk about going Active/Active with ClusterXL __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
