Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=CLI-system-ipsec-acceleration

ipsec-acceleration

Turn on or turn off IPsec Security Associations (SA) offloading from SlowPath. When turned on, the firewall offloads IPsec encryption and decryption based on the phase 2 Security Associations (SA). It offloads SAs for most of the encryption and authentication combinations available on Sophos Firewall. See "IPsec acceleration" in Architecture for offloading.

Restriction

The firewall doesn't offload the following SAs:

  • 3DES
  • BLowFish
  • MD5

Command

system ipsec-acceleration

Syntax

system ipsec-acceleration
[enable | disable | show]

Options

[enable | disable | show]

Turns SA offloading on or off and shows the current status of IPsec acceleration. Default: enabled.