I tested this about 7 months ago from my previous job on IP390, IP560, IP710 and IP1220. In all cases, SecureXL caused lot of issues especially with VPN and due to NAT in our environment.
David DeSimone <[EMAIL PROTECTED]> wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 cisco4ng wrote: > > During my extensive testing with NGx R61 w/ hfa_01 on Nokia IPSO 4.1 > build 19, I found that SecureXL is not recommended when you have > static NAT or VPN. During my test, I noticed that enabling SecureXL > broke VPN and SecureRemote/client and that it did not help when I have > static NAT on the firewall What hardware was your Nokia platform? We have found that on Nokia IP390, SecureXL works quite well, but on Nokia IP560, SecureXL ... does not work quite well, giving the results you described above. In our configuration, we do not use static NAT, only VPN, and VPN usage would drive CPU levels sky-high, leading to failure. We are still hammering Nokia for a fix to this condition. - -- David DeSimone == Network Admin == [EMAIL PROTECTED] "This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, dis- tribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you." --Lawyer Bot 6000 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFHOy/uFSrKRjX5eCoRAiL3AJ0VCR6MAYvKDOyh1oXnYliGHTUsLQCbBX2C ipFCo7GvAEs/8BjSUrrL3yE= =DYq4 -----END PGP SIGNATURE----- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Get easy, one-click access to your favorites. Make Yahoo! your homepage. Scanned by Check Point VPN-1 UTM NGX R65 with Messaging Security ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
