
gsgranados at comcast
Aug 10, 2009, 11:20 AM
Views: 828
Permalink
|
|
ASA5520 different crypt options and general tuning question?
|
|
Hi, thanks to many on this list and the great pointers I now have a working pair of ASA5520 devices with Cisco VPN client remote access working correctly. My question is a two parter. First, I see several encryption options including 3DES, DES and various AES entries with different bit counts. I understand generally what these different options do and what the associated hash options are used for but is there a better crypt type and hash type for differing jobs? When would you want to use 3DES instead of say aes-256? Is there ever a reason you'd use MD5 instead of sha??? Secondly, are there any good general documents for performance tuning? (maybe something that helps detail which knobs to twittle and why?) As always, any pointers would be greatly appreciated. Thanks Scott _______________________________________________ cisco-nsp mailing list cisco-nsp [at] puck https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
|