RE: vpn end-point

[paul <paul () compuwar net>]

On Thu, 18 Mar 2004, Claussen, Ken wrote:

> LOT of CPU on the termination point. Usually Edge routers have more
> available resources than firewalls in my experience. HTH.

This is the opposite of my experience.  I've yet to see a router with
enough CPU to do 3DES and handle significant traffic at the same time.
Traffic *to* a router tends to slow things down because (at least for the
green ones) it's process switched.  More CPU for a firewall (of the
non-appliance type) is generally just an upgrade or a swap out.  More CPU
for a router tends to be pretty expensive.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
paul () compuwar net       which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards