s

es
in
rB
us Nokia IP Security Solutions
fo

Nokia IP40
a
ki
No

Nokia IP40 is a fully integrated, feature- network reliability and firewall security with Check Point’s SmartCenter and SmartLSM, and
rich and pre-configured enterprise class features such as Virtual Router Redundancy SofaWare’s Security Management Portal. This
security solution. It is for distributed Protocol (VRRP) as well as multiple VPN allows the quick staging, easy installation
enterprise remote office branch office connection options offering excellent of additional systems or configuring and
(ROBO), work extenders and small and performance. upgrading appliances without network
medium business who need robust VPN downtime. For local management, the console
Nokia IP40 provides exceptional price-
connectivity and firewall protection at a port is available for easy access via a Nokia
performance from a state-of-the-art system
low cost. command-line interface (CLI).
that enables full connectivity from remote to
Nokia IP40 is the new mobile connectivity and central offices or other multiple connection Four versions of the Nokia IP40 are available
perimeter security solution for small offices types. In addition to the LAN port, the as robust enterprise class desktop devices.
that are pre-licensed with market-leading Nokia IP40 has an Ethernet port to enable Nokia IP40 enables distributed enterprises,
software for easy, out-of-the-box deployment. customers to secure a wireless LAN or other managed service providers and independent
Nokia IP40 is built with Nokia time-honored computers on the same appliance without businesses to deploy VPN and security
quality for high reliability with no moving affecting a corporate connection. The Nokia gateways with robust security and
parts and ease-of-maintenance including IP40 is also equipped with an AUX serial port high performance quickly, easily and
automatic upgrades to provide robust and for out-of-band management for dial backup cost-effectively.
dependable service for years to come. The remote configuration and troubleshooting.
Best of all, security, performance and reliability
appliance combines the market-leading Check
For multiple sites, Nokia IP40 provides are all backed 24/7 by Nokia world-class
Point software on a purpose-built and Nokia-
powerful remote and local management First Call—Final Resolution global support
designed hardware platform. It is well-suited
capabilities through Nokia Horizon Manager, and services.
for customers who demand complete

Branch Office
Remote Office
Modem
Corporate Offices Nokia IP40 Satellite 32 DMZ LAN
LAN
Nokia
Nokia Policy
Security Intrusion Nokia IP40
Horizon Management
Developers Protection Nokia IP40 Satellite 32 Satellite 16
Manager Server Systems
Alliance

Email Emai

VPN

Internet VPN
Telecommuters
Work Extenders
Nokia IP1260
LAN
Cluster
Web Web VPN Nokia IP40
Tele 8
DMZ Port
 Four versions of the Nokia IP40 VPN Connectivity Supported Standards
are available: • Site-to-Site VPN Connections • IPSec (RFCs 2401-2411, 2451)
Nokia IP40 Tele 8—includes 8 nodes • Client-VPN Connections • PPTP (RFC 2637)
for firewall and 8 tunnels for VPN client • 3DES, DES, AES Encryption • GRE (RFCs 1701 & 1702) Generic Routing
capabilities, specially designed for work • IPSec NAT Encapsulation Passthrough
extenders and home telecommuters. • Redundant VPN gateways • BGP v4 (RFC 1771 ) Border Gateway Protocol
• Remote-Access VPN Client • IKE (RFC’s 2409, 2410) Internet Key Exchange
Nokia IP40 Satellite 16/Nokia IP40 • PPPoE support • VRRP (RFC 2338) Virtual Router
Satellite 32—VPN gateway with integrated • PPTP support Redundancy Protocol
affiliates. Other trademarks mentioned are the property of their respective owners. Nokia operates a policy of continuous development. Therefore we reserve the right to make changes and improvements to any of the products described in this document without prior notice.

firewall that is ideal for site-to-site or client

Copyright © 2003 Nokia. All rights reserved. Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation. Check Point, the Check Point logo, FireWall-1, and VPN-1 are trademarks or registered trademarks of Check Point Software Technologies, Ltd or its

• DHCP client/server
remote access scenarios; the Nokia IP40 • AUX Port for dial backup
Satellite 16 supports up to 16 nodes for • DMZ Port to connect a second LAN
firewall and 10 tunnels for VPN; the Nokia or computer
IP40 Satellite 32 supports up to 32 nodes
for firewall and 10 tunnels for VPN.
• WAN Failover with Out-of-Band Nokia IP40
Management and Dial Backup
Distributed Enterprise, Remote Office,
Nokia IP40 Satellite Unlimited— Branch Office, Work Extender,
Routing Small/Medium Businesses
VPN gateway with integrated firewall that
• BGP v4
is ideal for growing offices and enterprises, Hardware Connectivity
• Independent Static Routes & NAT WAN: 10/100 port
enabling site-to-site or client remote access
per interface LAN: 10/100 port
scenarios. The Nokia IP40 Satellite Unlimited
DMZ: 10/100 port
supports an unlimited number of nodes High Availability Console: DB-9 port for CLI access
for firewall and 10 tunnels for VPN. • VRRP support (without State Sync) AUX: DB-9 port for Modem access

All Nokia IP40 systems include: Statistics Dimensions and Power

Dimensions W 7.2" x H 1.8" x D 5.8"
Firewall Features • Firewall (70 Mbps) (183.5mm x 43.0mm x 144.5mm)
• Stateful Packet Inspection Firewall • VPN (15 Mbps, 3DES) Weight 1.5 lbs. (700 g)
• NAT (Network Address Translation) Management Power input 100V, 120V, 230V
• PAT / PNAT (Port Address Translation) • Local management:
• Predefined services - SSH Access Front View
• User defined services - CLI VT100 Terminal Emulator
• Anti spoofing • Remote Management:
• Logging and alerting - Nokia Horizon Manager v.1.3.1
• Configurable per Interface - Check Point SmartCenter Rear View
- Check Point SmartCenter Pro (LSM) WAN/Internet LAN
Protection from DoS Attacks
• SYN attack Nestea - Check Point Provider-1
• Land attack ICMP flood - SofaWare SMP v3.x and 4.x
• Ping of death UDP flood - SNMP v2 Manager
• Tear drop WinNuke - Syslog Server
• Smurf IGMP fragments - Out-of-Band Management using PPP Console Port DMZ Port AUX Port
- Automatic Firmware updates using SMC for CLI Access for Modem
• Bonk DDoS protection
• Invisible to Port Scan - Check Point Logging Server
• DoS and DDoS Environment
• Malformed packets • Temperature: 5°C to 40°C
• Malicious packet • Humidity: 10% to 90% (non-condensing)
• Storage temperature: -20°C to 60°C

Americas
Tel: 1 877 997 9199
Email: [email protected]
Asia Pacific
Tel: +65 6588 3364
Email: [email protected]
Europe, Middle East and Africa
France +33 170 708 166
NI3 045 040

UK +44 161 601 8908

Email: [email protected]