Changing Protection Level to Boost Performance

Overview

Just a quick note about boosting the client performance for full Windows or RTC clients for customers using Dynamics 365 Business Central (aka Dynamics NAV).

This was brought to us by one of our customers that is looking for ways to reduce the lag for their users using the full Windows client.

One of the newer features in Dynamics 365 Business Central (aka Dynamics NAV) is to allow different connections to the data within NAV. This means security is a big issue since you do not want random programs to connect to your financial data.

Changing Protection Level

When you set the Protection Level as the default (EncryptAndSign), every data packet being sent and received are encrypted and authenticated to ensure you are who you are.

This means that when the users are viewing, for example, the customer card, if you disable their user on the Active Directory, they will get kicked out immediately. Yes, even if they’re not sending and receiving any data.

This may cause additional traffic to your data packets being sent and received as it requires additional layers of encryption and signing to ensure the data is legitimate as it ensure the person accessing the data is legitiment.

For users using NAV locally within the company where the server is hosted locally, these kind of security may not be needed.

For our client that’s running Dynamics NAV on-premise, changing Protection Level to None has significantly boosted the Windows client for the end users.

IMPORTANT NOTE!

You should only change this for users that are using NAV locally and are using Windows Login.

Your security is important and you should definitely consult your local security expert before changing this.

Proceed at your own risk!!

3 thoughts on “Changing Protection Level to Boost Performance

  1. stijn b. says:

    How does this setting reflect on a Service Tier configured for NavUserPassword? In this case no traffic with the AD is required since NAV handles the users. And the traffic should be encrypted by the ssl certificate on the Service Tier.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.