HP StorageWorks Enterprise File Services WAN Accelerator 3.0.4 installation and configuration guide (AG424-96004, March 2007)

46 2 - INSTALLING AND CONFIGURING THE HP EFS WAN ACCELERATOR
NOTE: If you are not optimizing all ports in your out-of-path deployment and you want to
optimize Messaging Application Programming Interface (MAPI) Exchange, you must specify
the MAPI end-point port (135), the HP EFS WAN Accelerator port used for Exchange traffic
(7830), and the HP EFS WAN Accelerator port used for Exchange directory Name Service
Provider Interface (NSPI) traffic (7840). For detailed information about MAPI Exchange
settings, see the HP Enterprise File Services WAN Accelerator Management Console user guide.
6. If you have a backup, out-of-path, HP EFS WAN Accelerator in your system (that
is, failover support), type the IP address and port for the backup appliance in the
Backup IP and Port text boxes. Use the following format: 0.0.0.0/0. The default
port is 7810.
7. Click Add Rule to apply the rule to the running configuration.
8. Click Save to write your settings to memory or click Reset to return the settings to
their previous values.
For detailed information about verifying your connections and configuration settings,
see “Verifying Your Configuration” on page 40.
You can now optimize WAN traffic using the HP EFS WAN Accelerator.
SMB Signing and Windows Performance
The Common Internet File System (CIFS) protocol, used by Windows operating
systems for file and print sharing, is based on the Server Message Block (SMB)
protocol. To prevent security assaults that might modify transmissions, the SMB
protocol supports signing all transmitted SMB packets. By default, Domain
Controllers that also act as file servers have signing enabled.
NOTE: If you are not using your Domain Controller as a file server SMB Signing is not an
issue.
SMB signing is a performance intensive operation for clients and servers. Hence this
feature is not turned on all the time. This feature is negotiated between the client and
the server.
SMB signing prevents the HP EFS WAN Accelerator from applying full optimization
on CIFS connections and significantly reduces the performance gain from a HP EFS
WAN Accelerator deployment. As many customers take additional security
precautions (such as firewalls, internal-only reachable servers, and so forth), SMB
signing adds little additional security, at a significant performance cost (even without
deployed HP EFS WAN Accelerators).