Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
storaid
Contributor

SSL VPN about hardware acceleration...

the FWF60C does not really support " sslvpn-kxp-hardware-acceleration" ?????

FWF60D x2 FWF60C x3 FGT80C rev.2 FGT200B-POE FAP220B x3 FAP221B x2

FSW224B x1

FWF60D x2 FWF60C x3 FGT80C rev.2 FGT200B-POE FAP220B x3 FAP221B x2 FSW224B x1
5 REPLIES 5
ede_pfau
Esteemed Contributor III

On a FG-80C:
 fw # diag vpn ssl hw-acceleration-status 
 Acceleration hardware detected: kxp=off cipher=on
 
 fw # diag vpn ssl hw-acceleration-kxp 
 This platform does not support hardware acceleration for key exchange.
 
 fw # diag vpn ssl hw-acceleration-cipher 
 Cipher acceleration is on
 

Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
stephen_ren_FTNT

On a FWF60CM: FW # diag vpn ssl hw-acceleration-cipher Cipher acceleration is on FW# diag vpn ssl hw-acceleration-status Acceleration hardware detected: kxp=off cipher=on FW # diag vpn ssl hw-acceleration-kxp This platform does not support hardware acceleration for key exchange.
romanr
Valued Contributor

Hi, I think there is no smaller box then the 110C to support HW accelerated key exchange... br, roman
kps12345

Hi,

 

If both kxp and cipher is off in acceleration status, will it increase the performance for SSLVPN?

 

Please help.

 

ede_pfau
Esteemed Contributor III

If both kxp and cipher is off in acceleration status, will it increase the performance for SSLVPN?

I think you meant on, and yes, if both switches are on SSLVPN setup will be hardware assisted. That is, not necessarily faster but tentatively less of a burden on the CPU.


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
Labels
Top Kudoed Authors