12 New in this releaseNN46110-600LDAP 3DES password encryptionThe VPN Router can store shared secrets that are encrypted with 3DES, but youmust first enable the feature. You enable 3DES by selecting Servers > LDAP andclicking TripleDES.For more information about encryption of shared secrets, see “Encrypting with3DES password” on page 27.LDAP user configurable encryption keyIn previous releases, passwords stored in LDAP were encrypted with the sameencryption key across all VPN Routers. This enhancement provides more securityon the VPN Router by allowing you to enter a desired encryption key forpasswords.For more information about the user encryption key, see “Configuring LDAP userencryption key” on page 28.LDAP optimization schedulingWith the LDAP optimization scheduling option, the VPN Router administratorcan configure the time and day that the LDAP database is optimized.LDAP optimization is a process that frees all unused memory blocks and deletesany deleted LDAP data structures, making the LDAP database lookups faster andmore efficient. The disadvantages of the LDAP optimization process are that itruns at the LDAP priority and is very CPU intensive. In environments with heavytraffic and very large LDAP databases, the optimization can cause timeouts anddata drops.For more information about LDAP optimization scheduling, see “OptimizingLDAP scheduling” on page 29.
