These assumption are correct, but you will want to consider if the device support ssl acceleration or not. If ssl acceleration is enabled, this will offload the encryption and decryption to the hardware acceleration card. If ssl acceleration is not supported or disabled, this will be done via the software. The results will differ depending if SSL or ESP mode is utilized and the distribution of packet sizes. Ideally, ESP with larger packets can pump more data through the SA device than SSL mode with small packets.
... View more