Preferred Cryptographic Hardware Setting

Networking & Firewalls
1

If I am not running a VPN thru my PFSense box, then what should my Cryptographic Hardware setting be? AES-NI, BSD Crypto Device, both, or none?

2

I would turn on AES-NI if you have it, but If you are not using VPN on pfsense, then it does not really matter.

2 Likes
3

Thanks, Tom. I remember you talking about this subject in the past but could not remember the specifics.

Yes, I have AES-Ni on my Protectli box, which I got under your recommendation, so I will enable that crypto feature.

Thank you for the reply.