compression type

[after1_]

Where do I set the compression for NC?

What are the recommended compression type? Im using SA6611

Thanks all

[firewall72_]

Hi,

It's a check box in the Profile. Go to Users, Resource Policies, Network Connect, Connection Profiles. Edit your Profile under Connect Settings, Transport and check the box for "Compression". I hope this helps.

[after1_]

Thanks firewall72

[zanyterp_]

There is no recommendation; it is something you will need to look at in your environment to decide what is best for you.

[after1_]

Isit possible to change the compression type? Ive unticked the compression and try to logon again but NC still showing compression as Deflate. How to change to different compression type?

[Kita_]

If NC is stating 'Deflated', then NC has failed over to SSL mode. If NC is in ESP mode, the compression should be LZO. I do not believe ESP supports other compression types besides LZO. If you would like to support other compression types, I would suggest filing a RFE with your account team to properly track your request.

[zanyterp_]

Do you have gzip enabled at System>Platform>Options? If yes, please disable that as well; that is the only way to disable compression for the SSL transport mode.

[after1_]

Couldnt find the gzip option under System>Platform>Options. Where else could it be?

What could have caused the failover to SSL? My firewall doesnt allow UDP 4500? Could this be the root cause?

If I open the UDP 4500 on the firewall, which interface do I permit to talk to UDP4500 - internal/external or external vip?

[hansei_]

It is the public address you access with https to login. It is typically the external address or the VIP in HA environments.

[Kita_]

Yes, if UDP 4500 is blocked on the firewall, then NC client will automatically fail over to SSL mode. You'll need to allow UDP 4500 to the ip address which end user are connecting to (ie. vip or external interface).