ipsec & compression

[Sean McCreanor]

Most other clients can do compression (Cisco's Unity Client for example
- but this is dependant on the termination point, currently only the VPN
3000 Concentrators support commpression, this apparently will be
available in both PIX and IOS in the near future), however as far as I
am aware, Check Point Firewall-1 4.1 and SecuRemote do not have
compression. Check Point NG (5.0) does, although this is currently in
beta. It may be worth checking it out.
Sean.

Sean McCreanor
Security Engineer
Com Tech Communications
121-127 Harrington Street
Sydney Australia 2000
Phone +61 2 8249 5086
Mobile +61 418 485 312

-----Original Message-----
From: VPN Mailing List [mailto:VPN at SECURITYFOCUS.COM] On Behalf Of Tina
Bird
Sent: Wednesday, 25 April 2001 2:47 AM
To: VPN at SECURITYFOCUS.COM
Subject: Re: ipsec & compression


I thought that a lot of VPN clients built compression
in?  I don't know about SecuRemote in particular, but I
do know that a lot of the other products I've reviewed
discuss compression algorithms in their technical documentation.  It has
to be done before the encryption to be effective.

On Mon, 23 Apr 2001, MaX Security wrote:

> Date: Mon, 23 Apr 2001 21:06:52 +0200
> From: MaX Security <MaXsecurity at INTERFREE.IT>
> To: VPN at SECURITYFOCUS.COM
> Subject: ipsec & compression
>
> Hi to all,
>
> Do you know if it is possible to compress data using securemote? Is it

> possible using additional module?
>
> If  it  is  not  possible to compress data before encrypting using the

> checkpoint  vpn  client,  do  you know if there are other win9x client

> that permit compression before the encryption phase (something similar

> to rfc 2393).
>
> Best Regards,
>      MaX
>
> VPN is sponsored by SecurityFocus.COM
>

VPN:  http://kubarb.phsx.ukans.edu/~tbird/vpn.html
life: http://kubarb.phsx.ukans.edu/~tbird
work: http://www.counterpane.com

VPN is sponsored by SecurityFocus.COM
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Sean McCreanor (seanm at comtech.com.au).vcf
Type: text/x-vcard
Size: 2124 bytes
Desc: not available
Url : http://lists.shmoo.com/pipermail/vpn/attachments/20010426/46ae122e/attachment.vcf 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3596 bytes
Desc: not available
Url : http://lists.shmoo.com/pipermail/vpn/attachments/20010426/46ae122e/attachment.bin