Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 3457 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN Cryptographic settings?

NewImage
Hi
I'm looking for recommendations on balancing performance and security for the  Cryptographic settings for SSL VPN? 

I experimented with them in the past and it looked like when I doubled my key length it cut my bandwidth in half. 

Is there any disadvantages to using UDP over TCP as its protocol?

Finally, Last year I heard there was a venerability with SSL traffic compression, has this been solved?


This thread was automatically locked due to age.
Parents
  • 0
    Hi, iirc CRIME & BEAST are browser problems; I haven't heard anything about it applying to VPN clients.

    The default AES profiles should be fine, but if you want to define a custom one, SHA would be more secure than MD5.

    Barry
Reply
  • 0
    Hi, iirc CRIME & BEAST are browser problems; I haven't heard anything about it applying to VPN clients.

    The default AES profiles should be fine, but if you want to define a custom one, SHA would be more secure than MD5.

    Barry
Children
No Data
Unfiltered HTML