Nokia IP Security Platforms Technical Specifications …

1 December 2006 Customer ConfidentialProductNokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 PositioningROBO, SMB and SME, Tele 8, Satellite 16, Satellite 32, Satellite UnlimitedEnterprise ROBO 8, 16, 32 and UnlimitedMedium businesses and corporate satellite locationsSmall to medium enterpriseMedium and large business systemMid-range large enterprise and service provider class systemHigh end service provider class systemVery high end service provider class systemWork extender, telecommuter, small office FW or VPN and Small to Medium BusinessWork extender, telecommuter, small office FW or VPNS atellite office scalable clustered VPN. Also runs FWFlexable enterprise class system with a low entry priceHigh performance for 1 RULarge Enterprise and Service Provider class systemService Provider, Large Enterprise Data Center systemHighest Performing Service Provider, Large Enterprise Data Center systemUsers Licenses8, 16, 32, U8, 16, 32, U25, 50, 100, 250, 500, U25, 50, 100, 250, 500, U25,50,100,250,500,U25, 50, 100, 250, 500, U25, 50, 100, 250, 500, U25, 50, 100, 250, 500, UFlash-basedYesYesNoYesYesYesDisk, flash-based, or hybridDisk, flash-based.

2 Or hybridYesUser LoginsMultipleMultipleMultipleMultipleMu ltipleMultipleMultipleMultipleAnti-Virus CapabilitiesYesYesCVPCVPCVPCVPCVPCVPR emote ManagementYesYesYesYesYesYesYesYesProvid er-1 ManageableYesYesYesYesYesYesYesYesCentra lized Service ManagementNokia Horizon Manager, SMPS mart CenterNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerLocal ManagementYesYesNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerBuilt in FW/VPN Management UIYesYesNoNoNoNoNoNoTelnet CLI AccessYesYesYesYesYesYesYesYesHTTPS UI AccessYesYesYesYesYesYesYesYesHardware VPN AcceleratorYesYesYes on MBYesYesYesYesOptionalSyslog CapableYesYesYesYesYesYesYesYesDHCP ServerYesYesYesYesYesYesYesYesDHCP ClientYesYesYesYesYesYesYesYesTACACS + client YesYesYesYesYesYesYesYesPPPOEYesYesYesYe sYesYesYesYesRadius

3 SupportYesYesYesYesYesYesYesYesNokia IP Security Platforms Technical Specifications GuideNokia Enterprise SolutionsEMEAN okia forBusinessProductNokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 PositioningOOB ManagementYesYesYesYesYesYesYesYesSSHYes YesYesYesYesYesYesYesSSLYesYesYesYesYesY esYesYesSNMPYesYesYes (MIB II)YesYes (MIB II)Yes (MIB II)Yes (MIB II)Yes (MIB II)Content FilterUFPUFPUFPUFPUFPUFPUFPUFPP erformance MonitoringNoNoYesYesYesYesYesYesDisk Mirroring (IPSO and up)NoNoNoNoNoDisk-based systems onlyDisk-based systems onlyN/ARack MountableDesktopDesktopYesYesYesYesYesYe sICSAC heck Point VPN-1 Pro and Check Point VPN-1 Express are ICSA certified by Check PointNEBS IIINoNoNoNoNoNoYesNoFIPS 140-2 NoNoNoNoNoNoNoNoCC/EAL-4 IPSO w/ Check Point FP2 NoYes, EAL certifiedNoNoNoNoNoNoCC/EAL-4 IPSO w/ Check Point R55p NoYesNoNoYesYesYesCC/EAL-4 IPSO w/ Check Point NGX R60 NoYesNoNoYesYesYesNetwork Processor BasedNoNoNoNoNoNoNoYesDefault RAM memory config128 MB128 MB512 MB RAM1 GB RAM1 GB RAM1 GB RAM1 GB RAM2 GB RAMM aximum memory config32 MB Flash32 MB Flash512 MB RAM2 GB RAM2 GB RAM2 GB RAM2 GB RAM2 GB RAMT otal memory slotsN/AN/AN/A24444 Hard disk (GB)

4 NoNo40 GB512 MB Flash1 GB Flash1 GB Flash40 GB HD or 1 GB Flash40 GB HD or 1 GB Flash1 GB FlashRedundant Hard Drive (optional)NoNoNoNoNoYesYesYesHybrid configuration (Flash + Disk) supportNoNoNoYes (40GB HDD optional)YesYesYesNoDefault Number of 10/100 Ethernet Ports3 (1 external, 1 internal, 1 DMZ)4 ports LAN, 1 WAM, 1 DMZ/WAN24*004*4*0 Default Number of 10/100/1000 Ethernet Ports00044004**Maximum Number of 10/100 Ethernet Ports34 LAN, 2 WAN48 (not including integrated ports)16202036 Maximum Number of 10/100/1000 Ethernet Ports000816161620 Console11111111 Aux Port11111111 ModemSerial ModemSerial PortNoNo1 NoNoNoNumber of available interface slotsN/AN/AN/A2 PMC Slots4 External Facing PMC Slots, 1 Internal PMC Slot2 6U CPCI slots that support Dual PMC Carriers (Total of 4 PMC slots), 1 internal PMC socket2 6U CPCI slots that support Dual PMC Carriers (Total of 4 PMC slots), 1 internal PMC socket4 Nokia Uniqe CPCI ADP Slots Plus one CPCI management slot * Included 10/100 Ethernet interfaces intended for management.

5 These interfaces are fully routable and can be used to pass traffic, but throughput will be limited relative to the standard I/O ports resident on the PMC Interface Cards. ** four of six 10/100 interfaces intended for management** CPCI card intended for managementProductNokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 PositioningMaintains multiple configuration setsNoNoYesYesYesYesYesYesMaintains multiple O/S images and software versionsNoNoYesYesYesYesYesYesOptional Interfaces & Components2 Port MMF Gigabit EthernetNoNoNoYesYesYesYesYes1 Port MMF Gigabit EthernetNoNoNoNoNoNoNoNo2 Port Copper Gigabit EthernetNoNoNoYesYesYesYesYes (1 Gbps only)4 Port Copper Gigabit EthernetNoNoNoNoYesYesYesYes 2 Port Copper Ethernet 10/100 NoNoNoNoNoYesYesNo4 Port Copper Ethernet 10/100 NoNoNoYesYesYesYesNo 1 Port 10 Gigabit EthernetNoNoNoNoNoNoNoYes8 Port Copper 10/100 NoNoNoNoNoNoNoYesSingle serial NoNoNoNoNoNoYesNoSingle serialNoNoNoNoNoNoYesNoDual serialNoNoNoNoNoNoNoNoDual serialNoNoNoNoNoNoNoNoSingle Port TI CSU/DSUNoNoNoNoNoNoNoNoSingle Port E1 CSU/DSUNoNoNoNoNoNoNoNo1 Port S/T, ISDN, BRINoNoNoNoNoNoYesNo1 Port HSSI 45 MbpsNoNoNoNoNoNoNoNoMMF ATM 155 Mbps OC-3 NoNoNoNoNoNoNoNoVPN AcceleratorIncludedIncludedIncludedInclu dedIncludedOptionalIncludedOptionalRedun dant Power SupplyNoNoNoNoNoOptionalInstalled, not optional Installed, not optional Hot swappable Interface cardsNoNoNoNoNoYesYesYesSecondary (Mirrored)

6 Hard disk driveNoNoNoNoNoYes, disk-based systems onlyYes, disk-based systems onlyNoApplication SupportCheck Point Check Point VPN-1 Embedding NGCheck Point VPN-1 Embedding NGCheck Point VPN-1 Pro Check Point VPN-1 Express Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 Express Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerNokia Horizon ManagerNokia Horizon Manager and upNoYesYesYesYesYesYesNokia Management Center Appliance ManagerNoNoYesYesYesYesYesYesNokia Network VoyagerNokia Management GUI and documentation (but not Nokia Network Voyager)NoYesYesYesYesYesYesAuthenticati on & AuthorizationRADIUS client for user authentication and authorizationNokia Multiple Domain Security SupportNoNoNoNoNoNokia MDS or higherYesYesProduct Nokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 Characteristics of the OSIPSO Operating System Shipping NowNokia IPSO-RX, Software application IPSO IPSO IPSO IPSO IPSO IPSO Version Platforms Originally Shipped WithNokia IPSO-RXNoNokia IPSO IPSO IPSO IPSO IPSO IPSO , SNMPv2, and SNMPv3 managementSNMP v2 SNMP v2 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2.

7 And SNMPv3 Software Acceleration N/AN/ASecureXLSecureXLSecureXLSecureXLSe cureXLSecureXLVRRPYesYesYesYesYesYesYesY esClusteringNoNoYesYesYesYes (IPSO )Yes (IPSO +)Yes (IPSO )IPSec Tele 8 Client Session Mode, Satellite 16 Site-to-Site, Satellite 32 Site-to-Site, Satellite Unlimited Site-to-SiteSite-to-Site IPSec, IPSec VPN ClientSite to SiteSite to SiteSite to SiteSite to SiteSite to SiteSite to SiteIPv6 SupportNoYesYesYesYesYesYesKey ManagementIKEIKEIKEIKEIKEIKEIKEIKEO ptional Routing ProtocolsSupport IGRPNoNoYesYesYesYesYesYesSupport BGP4 YesNoYesYesYesYesYesYesMulticast: DVMRP, IGMP, PIM-DM, PIM-SMNoNoYesYesYesYesYesYesDHPC Server / DHCP ClientYesYesIPSO +IPSO +YesYesIPSO +IPSO +IPSO +Performance (IPSO Check Point NGX) Maximum possible throughput achieved under ideal testing FW-1 Throughput80 Mbps8, 16, 32 users: 80 Mbps, Unlimited: 150 Mbps248 Mbps227 Mbps3 Gbps6 Gbps4 GbpsVPN-1 Throughput (3 DES/SHA-1) 20 Mbps8, 16, 32 users: 20 Mbps, Unlimited.

8 30 Mbps112 Mbps500 Gbps1,194 Mbps1,497 Mbps2,300 MbpsVPN-1 Throughput (AES256/SHA-1) N/AN/A113 Mbps500 Gbps1,217 Mbps1,550 Mbps130 MbpsFirewall Connections Per Second Nokia IPSO and Check Point VPN-1 R55N/A8,0005,5814,77958,06639,85362,9798 7,000 Maximum FW-1 TCP/IP ConnectionsN/AN/A135,00090,000725,000725 ,000725,000725,000725,000 Power RequirementsAC Input Voltage100-120 V/200-240 VAC100-120 V/200-240 VAC100-120 V/200-240 VAC100-120V/200-240 VAC100-120 V/200-240 VAC100-120 V/200-240 VAC100-120 V/200-240 VAC100-120 V/200-240 VACF requency50/60 Hz50/60 Hz50/60 Hz50/60 Hz50/60 Hz50/60 Hz50/60 Hz50/60 HzAC Input AVolts (US)1212110120110100100100 Amps (US) Nokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 Power RequirementsVolts (Europe) 220220220240240240 Amps (Europe) watts (US) 55162330350350350 Peak watts (Europe) 55127330360360360 Sustained EnvironmentOperating Temperature5 C - 40 C 5 C - 40 C-5 C to +45 C0 C - 40 C5 C - 40 C5 C - 40 C5 C - 40 COperating Humidity10% - 90% 10% - 90%10%-90%10% - 90%10% - 90%10% - 90%10% - 90%Peak BTU/Hr Sustained (in/cm) cmDepth (in/cm) cm8 cm17 in/62 cmWidth (in/cm) cm17 cm17 in/44 cm17 in/44 cm17 in/44 cm17 in/44 cmWeight lb/( kg)

9 Kg18 lbs / 12 kg 36 lbs/16 kg36 lbs/16 kgFor Nokia IP200 Series in a Two-Unit rack mountRackable1 RU 19 Height (in/cm) cmDepth (in/cm)16 cmWidth (in/cm) cmWeight KgServiceOn SiteNoNoNokia Platforms have a selection of either On Site and/or Advance Replacement support availableAdvance Replacement (See the monthly Nokia price list for details)NI3 051 002 Copyright 2006 Nokia . All Rights Reserved. Nokia is a registered trademark of Nokia Corporation. Java is a registered trademark of Sun Microsystems, Inc. Other product and company names mentioned herein may be trademarks or trade names of their respective owners. Specifications are subject to change without notice. The availability of particular products and services may vary by region. Please check with the Nokia dealer nearest you.

10 Operations and some features are network dependent. Europe, Middle East and AfricaFrance +33 170 708 166UK +44 161 601