cancel
Showing results for 
Search instead for 
Did you mean: 

compression type

Highlighted
Contributor

compression type

Where do I set the compression for NC?

What are the recommended compression type? Im using SA6611

Thanks all

9 REPLIES 9
Highlighted
Frequent Contributor

Re: compression type

Hi,

It's a check box in the Profile. Go to Users, Resource Policies, Network Connect, Connection Profiles. Edit your Profile under Connect Settings, Transport and check the box for "Compression". I hope this helps.

Highlighted
Contributor

Re: compression type

Thanks firewall72
Highlighted
Respected Contributor

Re: compression type

There is no recommendation; it is something you will need to look at in your environment to decide what is best for you.

Highlighted
Contributor

Re: compression type

Isit possible to change the compression type? Ive unticked the compression and try to logon again but NC still showing compression as Deflate. How to change to different compression type?

Highlighted
Valued Contributor

Re: compression type

If NC is stating 'Deflated', then NC has failed over to SSL mode. If NC is in ESP mode, the compression should be LZO. I do not believe ESP supports other compression types besides LZO. If you would like to support other compression types, I would suggest filing a RFE with your account team to properly track your request.

Highlighted
Respected Contributor

Re: compression type

Do you have gzip enabled at System>Platform>Options? If yes, please disable that as well; that is the only way to disable compression for the SSL transport mode.
Highlighted
Contributor

Re: compression type

Couldnt find the gzip option under System>Platform>Options. Where else could it be?

What could have caused the failover to SSL? My firewall doesnt allow UDP 4500? Could this be the root cause?

If I open the UDP 4500 on the firewall, which interface do I permit to talk to UDP4500 - internal/external or external vip?

Highlighted
New Contributor

Re: compression type

It is the public address you access with https to login. It is typically the external address or the VIP in HA environments.
Highlighted
Valued Contributor

Re: compression type

Yes, if UDP 4500 is blocked on the firewall, then NC client will automatically fail over to SSL mode. You'll need to allow UDP 4500 to the ip address which end user are connecting to (ie. vip or external interface).