SSL VPN about hardware acceleration...

[storaid]

the FWF60C does not really support " sslvpn-kxp-hardware-acceleration" ?????

[ede_pfau]

On a FG-80C:

 fw # diag vpn ssl hw-acceleration-status 
 Acceleration hardware detected: kxp=off cipher=on
 
 fw # diag vpn ssl hw-acceleration-kxp 
 This platform does not support hardware acceleration for key exchange.
 
 fw # diag vpn ssl hw-acceleration-cipher 
 Cipher acceleration is on
 

[stephen_ren_FTNT]

On a FWF60CM: FW # diag vpn ssl hw-acceleration-cipher Cipher acceleration is on FW# diag vpn ssl hw-acceleration-status Acceleration hardware detected: kxp=off cipher=on FW # diag vpn ssl hw-acceleration-kxp This platform does not support hardware acceleration for key exchange.

[romanr]

Hi, I think there is no smaller box then the 110C to support HW accelerated key exchange... br, roman

[kps12345]

Hi,

If both kxp and cipher is off in acceleration status, will it increase the performance for SSLVPN?

Please help.

[ede_pfau]

If both kxp and cipher is off in acceleration status, will it increase the performance for SSLVPN?

I think you meant on, and yes, if both switches are on SSLVPN setup will be hardware assisted. That is, not necessarily faster but tentatively less of a burden on the CPU.