Nokia IP2255 - Security Appliance, Installation Manual

Page: 78 / 124

5
Installing, Replacing, and Configuring the Nokia Encryption Accelerator Card
78 Nokia IP2255 Security Platform Installation Guide
Configuring and Activating Encryption
Acceleration
The Nokia encryption accelerator software package is part of the Nokia IPSO
operating system, so the appliance automatically detects and configures the
Nokia encryption accelerator card.
For the Nokia IP2255 appliances, SecureXL is on by default. After you install
the Nokia encryption accelerator card and reboot the appliance, SecureXL
automatically uses the Nokia encryption accelerator card for encryption
acceleration. If you do not want to use SecureXL for encryption acceleration,
use the Check Point cpconfig utility to disable SecureXL.
You can also configure the IP2255 appliances to use the Nokia encryption
accelerator card for IKE acceleration. When you enable IKE acceleration, the
Nokia encryption accelerator card performs cryptographic operations for
IPsec tunnel negotiation.
To enable IKE acceleration
1. From the Network Voyager home page, click Security and Access
Configuration, then click IKE Acceleration.
For information about how to access Network Voyager and the related
reference materials, see
“Using Nokia Network Voyager” on page 53.
2.
On the IKE Acceleration page, click Register the module.
3. Click Apply.
The PKCS#11 token that enables IKE acceleration is registered with the
Check Point software on your appliance. After you register the module,
you must install the Check Point security policy on the firewall for the
Nokia encryption accelerator card to perform IKE acceleration.