[c-nsp] 2821 up/down performance continued

[Piotr Nowacki]

Hi, 
I already asked about it before and got problem solved.
The reason that ftp upload speed was 5 times slower then download 
routed via 2821 was duplex mismatch between 2821 and the switch.
Traffic was sent via IPSEC tunnel.

After fixing that, upload was still 2 times slower then download
for traffic passing IPSEC tunnel but equal for unencrypted traffic.
Is this normal ?
Does encryption need more resources and is more time consuming then
decryption.
Where to look first ?

Regards
Peter