<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2654.59">
<TITLE>RE: IPSec & compression</TITLE>
</HEAD>
<BODY>
<BR>
<BR>
<P><FONT SIZE=2>To support compression the VPN gateway, in this case Check Point, will have to support compression as well. As I recall Check Point didn't support IPComp(RFC 2393) or Deflate in 4.1, but maybe they rolled it into 5.0. The SafeNet client supports Deflate in SoftPK 5.0 and they do interoperate with Check Point. But then again, your kind of dependant on the gateway supporting the algorithm. Check out the Check Point 5.0 enhancements if you haven't yet. Chances are if they added this support to the gateway they put it in the client as well. </FONT></P>
<BR>
<BR>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Tina Bird [<A HREF="mailto:tbird@PRECISION-GUESSWORK.COM">mailto:tbird@PRECISION-GUESSWORK.COM</A>]</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, April 24, 2001 12:47 PM</FONT>
<BR><FONT SIZE=2>To: VPN@SECURITYFOCUS.COM</FONT>
<BR><FONT SIZE=2>Subject: Re: ipsec & compression</FONT>
</P>
<BR>
<P><FONT SIZE=2>I thought that a lot of VPN clients built compression</FONT>
<BR><FONT SIZE=2>in? I don't know about SecuRemote in particular, but I</FONT>
<BR><FONT SIZE=2>do know that a lot of the other products I've reviewed</FONT>
<BR><FONT SIZE=2>discuss compression algorithms in their technical</FONT>
<BR><FONT SIZE=2>documentation. It has to be done before the encryption</FONT>
<BR><FONT SIZE=2>to be effective.</FONT>
</P>
<P><FONT SIZE=2>On Mon, 23 Apr 2001, MaX Security wrote:</FONT>
</P>
<P><FONT SIZE=2>> Date: Mon, 23 Apr 2001 21:06:52 +0200</FONT>
<BR><FONT SIZE=2>> From: MaX Security <MaXsecurity@INTERFREE.IT></FONT>
<BR><FONT SIZE=2>> To: VPN@SECURITYFOCUS.COM</FONT>
<BR><FONT SIZE=2>> Subject: ipsec & compression</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> Hi to all,</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> Do you know if it is possible to compress data using securemote? Is it</FONT>
<BR><FONT SIZE=2>> possible using additional module?</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> If it is not possible to compress data before encrypting using the</FONT>
<BR><FONT SIZE=2>> checkpoint vpn client, do you know if there are other win9x client</FONT>
<BR><FONT SIZE=2>> that permit compression before the encryption phase (something similar</FONT>
<BR><FONT SIZE=2>> to rfc 2393).</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> Best Regards,</FONT>
<BR><FONT SIZE=2>> MaX</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> VPN is sponsored by SecurityFocus.COM</FONT>
<BR><FONT SIZE=2>></FONT>
</P>
<P><FONT SIZE=2>VPN: <A HREF="http://kubarb.phsx.ukans.edu/~tbird/vpn.html" TARGET="_blank">http://kubarb.phsx.ukans.edu/~tbird/vpn.html</A></FONT>
<BR><FONT SIZE=2>life: <A HREF="http://kubarb.phsx.ukans.edu/~tbird" TARGET="_blank">http://kubarb.phsx.ukans.edu/~tbird</A></FONT>
<BR><FONT SIZE=2>work: <A HREF="http://www.counterpane.com" TARGET="_blank">http://www.counterpane.com</A></FONT>
</P>
<P><FONT SIZE=2>VPN is sponsored by SecurityFocus.COM</FONT>
</P>
</BODY>
</HTML>