v21 XG Home VPN Hardware acceleration

Hello!

Yes, Sophos Firewall Home Edition does support hardware acceleration for cryptographic stuff.

Both IPsec and SSLVPN (OpenVPN) utilizes AES-NI.

MikeyS said:

The XG135 R3 has QAT too

The Home Edition doesn't support QAT, but it will use AES-NI.

Also, I don't think QAT was ever used by Sophos.

Many thanks.  Will see what unit I end up keeping, the XG135 R3 also has the rack mount kit.

Hoping to be on a Toob 900/900 connection next year.  Use VPNs for s2s to family members.  Got openvpn cloud IPsec working too for the 4G failover.

Need to look at ZTNA for client access at some point.

Lets encrypt limited, so will either install something on another box or buy a 3rd party cert.

i life XG, but pfsense is also very flexible.

IPSec isn't accelerated, ran the CLI query.

system ipsec-acceleration show

IPsec acceleration isn't available on XG Series hardware, virtual, software, and cloud devices.

It is, the message that was given is about Sophos XGS series, which have a secondary processor (NPU) for IPsec offload.

That CLI query isn't related to AES-NI.