Nokia IP Security Platforms Technical Specifications Guide ...

1 December 2006 Customer ConfidentialProductNokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 PositioningROBO, SMB and SME, Tele 8, Satellite 16, Satellite 32, Satellite UnlimitedEnterprise ROBO 8, 16, 32 and UnlimitedMedium businesses and corporate satellite locationsSmall to medium enterpriseMedium and large business systemMid-range large enterprise and service provider class systemHigh end service provider class systemVery high end service provider class systemWork extender, telecommuter, small office FW or VPN and Small to Medium BusinessWork extender, telecommuter, small office FW or VPNS atellite office scalable clustered VPN.

2 Also runs FWFlexable enterprise class system with a low entry priceHigh performance for 1 RULarge Enterprise and Service Provider class systemService Provider, Large Enterprise Data Center systemHighest Performing Service Provider, Large Enterprise Data Center systemUsers Licenses8, 16, 32, U8, 16, 32, U25, 50, 100, 250, 500, U25, 50, 100, 250, 500, U25,50,100,250,500,U25, 50, 100, 250, 500, U25, 50, 100, 250, 500, U25, 50, 100, 250, 500, UFlash-basedYesYesNoYesYesYesDisk, flash-based, or hybridDisk, flash-based, or hybridYesUser LoginsMultipleMultipleMultipleMultipleMu ltipleMultipleMultipleMultipleAnti-Virus CapabilitiesYesYesCVPCVPCVPCVPCVPCVPR emote ManagementYesYesYesYesYesYesYesYesProvid er-1 ManageableYesYesYesYesYesYesYesYesCentra lized Service ManagementNokia Horizon Manager.

3 SMPS mart CenterNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerNokia Horizon Manager Appliance ManagerLocal ManagementYesYesNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerNokia Network VoyagerBuilt in FW/VPN Management UIYesYesNoNoNoNoNoNoTelnet CLI AccessYesYesYesYesYesYesYesYesHTTPS UI AccessYesYesYesYesYesYesYesYesHardware VPN AcceleratorYesYesYes on MBYesYesYesYesOptionalSyslog CapableYesYesYesYesYesYesYesYesDHCP ServerYesYesYesYesYesYesYesYesDHCP ClientYesYesYesYesYesYesYesYesTACACS + client YesYesYesYesYesYesYesYesPPPOEYesYesYesYe sYesYesYesYesRadius SupportYesYesYesYesYesYesYesYesNokia IP Security Platforms Technical Specifications GuideNokia Enterprise SolutionsEMEAN okia forBusinessProductNokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 PositioningOOB

4 ManagementYesYesYesYesYesYesYesYesSSHYes YesYesYesYesYesYesYesSSLYesYesYesYesYesY esYesYesSNMPYesYesYes (MIB II)YesYes (MIB II)Yes (MIB II)Yes (MIB II)Yes (MIB II)Content FilterUFPUFPUFPUFPUFPUFPUFPUFPP erformance MonitoringNoNoYesYesYesYesYesYesDisk Mirroring (IPSO and up)NoNoNoNoNoDisk-based systems onlyDisk-based systems onlyN/ARack MountableDesktopDesktopYesYesYesYesYesYe sICSAC heck Point VPN-1 Pro and Check Point VPN-1 Express are ICSA certified by Check PointNEBS IIINoNoNoNoNoNoYesNoFIPS 140-2 NoNoNoNoNoNoNoNoCC/EAL-4 IPSO w/ Check Point FP2 NoYes, EAL certifiedNoNoNoNoNoNoCC/EAL-4 IPSO w/ Check Point R55p NoYesNoNoYesYesYesCC/EAL-4 IPSO w/ Check Point NGX R60 NoYesNoNoYesYesYesNetwork Processor BasedNoNoNoNoNoNoNoYesDefault RAM memory config128 MB128 MB512 MB RAM1 GB RAM1 GB RAM1 GB RAM1 GB RAM2 GB RAMM aximum memory config32 MB Flash32 MB Flash512 MB RAM2 GB RAM2 GB RAM2 GB RAM2 GB RAM2 GB RAMT otal memory slotsN/AN/AN/A24444 Hard disk (GB)NoNo40 GB512 MB Flash1 GB Flash1 GB Flash40 GB HD or 1 GB Flash40 GB HD or 1 GB Flash1 GB FlashRedundant Hard Drive (optional)

5 NoNoNoNoNoYesYesYesHybrid configuration (Flash + Disk) supportNoNoNoYes (40GB HDD optional)YesYesYesNoDefault Number of 10/100 Ethernet Ports3 (1 external, 1 internal, 1 DMZ)4 ports LAN, 1 WAM, 1 DMZ/WAN24*004*4*0 Default Number of 10/100/1000 Ethernet Ports00044004**Maximum Number of 10/100 Ethernet Ports34 LAN, 2 WAN48 (not including integrated ports)16202036 Maximum Number of 10/100/1000 Ethernet Ports000816161620 Console11111111 Aux Port11111111 ModemSerial ModemSerial PortNoNo1 NoNoNoNumber of available interface slotsN/AN/AN/A2 PMC Slots4 External Facing PMC Slots, 1 Internal PMC Slot2 6U CPCI slots that support Dual PMC Carriers (Total of 4 PMC slots), 1 internal PMC socket2 6U CPCI slots that support Dual PMC Carriers (Total of 4 PMC slots), 1 internal PMC socket4 Nokia Uniqe CPCI ADP Slots Plus one CPCI management slot * Included 10/100 Ethernet interfaces intended for management.

6 These interfaces are fully routable and can be used to pass traffic, but throughput will be limited relative to the standard I/O ports resident on the PMC Interface Cards. ** four of six 10/100 interfaces intended for management** CPCI card intended for managementProductNokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 PositioningMaintains multiple configuration setsNoNoYesYesYesYesYesYesMaintains multiple O/S images and software versionsNoNoYesYesYesYesYesYesOptional Interfaces & Components2 Port MMF Gigabit EthernetNoNoNoYesYesYesYesYes1 Port MMF Gigabit EthernetNoNoNoNoNoNoNoNo2 Port Copper Gigabit EthernetNoNoNoYesYesYesYesYes (1 Gbps only)

7 4 Port Copper Gigabit EthernetNoNoNoNoYesYesYesYes 2 Port Copper Ethernet 10/100 NoNoNoNoNoYesYesNo4 Port Copper Ethernet 10/100 NoNoNoYesYesYesYesNo 1 Port 10 Gigabit EthernetNoNoNoNoNoNoNoYes8 Port Copper 10/100 NoNoNoNoNoNoNoYesSingle serial NoNoNoNoNoNoYesNoSingle serialNoNoNoNoNoNoYesNoDual serialNoNoNoNoNoNoNoNoDual serialNoNoNoNoNoNoNoNoSingle Port TI CSU/DSUNoNoNoNoNoNoNoNoSingle Port E1 CSU/DSUNoNoNoNoNoNoNoNo1 Port S/T, ISDN, BRINoNoNoNoNoNoYesNo1 Port HSSI 45 MbpsNoNoNoNoNoNoNoNoMMF ATM 155 Mbps OC-3 NoNoNoNoNoNoNoNoVPN AcceleratorIncludedIncludedIncludedInclu dedIncludedOptionalIncludedOptionalRedun dant Power SupplyNoNoNoNoNoOptionalInstalled, not optional Installed, not optional Hot swappable Interface cardsNoNoNoNoNoYesYesYesSecondary (Mirrored)

8 Hard disk driveNoNoNoNoNoYes, disk-based systems onlyYes, disk-based systems onlyNoApplication SupportCheck Point Check Point VPN-1 Embedding NGCheck Point VPN-1 Embedding NGCheck Point VPN-1 Pro Check Point VPN-1 Express Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 Express Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerCheck Point VPN-1 Pro Check Point VPN-1 PowerNokia Horizon ManagerNokia Horizon Manager and upNoYesYesYesYesYesYesNokia Management Center Appliance

9 ManagerNoNoYesYesYesYesYesYesNokia Network VoyagerNokia Management GUI and documentation (but not Nokia Network Voyager)NoYesYesYesYesYesYesAuthenticati on & AuthorizationRADIUS client for user authentication and authorizationNokia Multiple Domain Security SupportNoNoNoNoNoNokia MDS or higherYesYesProduct Nokia IP45 Nokia IP60 Nokia IP260 Nokia IP265 Nokia IP390 Nokia IP560 Nokia IP1220 Nokia IP1260 Nokia IP2255 Characteristics of the OSIPSO Operating System Shipping NowNokia IPSO-RX, Software application IPSO IPSO IPSO IPSO IPSO IPSO Version Platforms Originally Shipped WithNokia IPSO-RXNoNokia IPSO IPSO IPSO IPSO IPSO IPSO , SNMPv2.

10 And SNMPv3 managementSNMP v2 SNMP v2 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 SNMP REC 1157, SNMPv2, and SNMPv3 Software Acceleration N/AN/ASecureXLSecureXLSecureXLSecureXLSe cureXLSecureXLVRRPYesYesYesYesYesYesYesY esClusteringNoNoYesYesYesYes (IPSO )Yes (IPSO +)Yes (IPSO )IPSec Tele 8 Client Session Mode, Satellite 16 Site-to-Site, Satellite 32 Site-to-Site, Satellite Unlimited Site-to-SiteSite-to-Site IPSec, IPSec VPN ClientSite to SiteSite to SiteSite to SiteSite to SiteSite to SiteSite to SiteIPv6 SupportNoYesYesYesYesYesYesKey ManagementIKEIKEIKEIKEIKEIKEIKEIKEO ptional Routing ProtocolsSupport IGRPNoNoYesYesYesYesYesYesSupport BGP4 YesNoYesYesYesYesYesYesMulticast.