- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Hi,
I established a site-to-site VPN between a 600 appliance and an old UTM-1 edge. Both devices support IPSEC compression related to their datasheets, but the tunnel is established without.
I find no options at all to check this. Any help is welcome.
Best regards,
Stephan
Here's where you set it on the 600 Series:
I don't believe there is a specific setting on the UTM-1 EDGE appliance to enable it, but the way I understand it, if the other side is configured to support it, the UTM-1 EDGE will use it.
I found that advanced setting, but it does not change the behaviour. Still no compression with the tunnel...
It looks like it's a setting for VPN clients (i.e. what Remote Access means), not site-to-site VPN.
I know with centrally managed SMB appliances, you can configure IP Compression in the VPN Community.
There does not appear to be a way to enable this option for local management.
Okay, thanks a lot for your answers. Not a big issue for me, I just wanted to make sure that I don‘t overlook the place of configuration.
Compression should really only be enabled for slow connections (e.g. Remote Access). On high speed site-to-site VPNs it will more likely cause performance issues, especially on SMB.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY