SG-1100 with pfSense plus 21.02 how to leverage SafeXcel
-
I see this crypto engine listed now. What are the best settings for
System - Advanced - Miscellaneous - Cryptographic Hardware
And
VPN - OpenVPN - Clients - Hardware Crypto
to leverage this ?
I have posted a similar question re: the SG-4860. The manual just says use your device manual to determine best settings but the SG-1100 manual I have access to was written before pfSense plus.
-
@mfld SafeXcel accelerates AES encryption for IPSec. To utilize it, you'd want to use IPSec.
-
Yes, it only really does anything useful for IPSec currently. Enable it in Sys > Adv > Misc then set IPSec to use one of the supported ciphers.
https://www.freebsd.org/cgi/man.cgi?query=safexcelSteve
