VPN Modules provide up to 10 times the performance over software-only encryption by offloading the encryption processing from the router central processing unit (CPU). Ideal for use in enterprise branch offices for connecting remote offices, mobile users, and partner extranets or service provider managed-services customer premises equipment (CPE), the Cisco 1700, 2600, 3600, and 3700 Series VPN Modules delivers a rich integrated package of routing, firewall, intrusion-detection, and VPN functions. An AIM can be considered when the CPU is more loaded or the compression process is delayed .
http://www.cisco.com/en/US/products/hw/routers/ps259/products_data_sheet09186a0080088750.html
