8328 Nokia Network Voyager for IPSO 4.0 Reference GuideEnabling Encryption Accelerator CardsIf you do not intend to use SecureXL, you must manually enable the encryption accelerator cardafter you install it. If you enable SecureXL, the encryption accelerator card is automaticallyenabled—you do not need to perform any other software task to activate the card.NoteYou cannot enable the card before you install it. The options in Network Voyager forenabling the card do not appear until it is installed.To enable the encryption accelerator card when you are using Check Point software to create andmanage VPN tunnels, complete the following procedure.To enable the card for a Check Point VPN1. Click IPSec under Security and Access in the tree view.2. Scroll down the page and click IPSec Advanced Configuration.3. At Hardware Device Configuration, click On.4. Click Apply to enable the card.Monitoring Cryptographic AccelerationYou can also monitor encryption accelerator card interfaces with Network Voyager.To monitor the encryption accelerator cards, click Cryptographic Accelerator Statistics underMonitor > Hardware Monitoring in the tree view.IPSec Tunnels (IPSO Implementation)Developed by the Internet Engineering Task Force (IETF), IPSec is the industry standard thatensures the construction of secure virtual private networks (VPNs). A VPN is a private andsecure network implemented on a public and insecure network. Secure VPNs are as safe asisolated office LANs running entirely over private lines and much more cost effective.NoteBecause the IP2250 appliance requires the use of Check Point’s SecureXL, this platformdoes not support IPSO’s implementation of IPsec.The IPSec protocol suite provides three new protocols for IP: An authentication header (AH) that provides connectionless integrity and data originauthentication. The IP header is included in the authenticated data. It does not offerencryption services.
