Secure
Connections
Reliable Manageable
Nokia IP Security Solutions
Nokia IP330
The Nokia IP330 is a purpose-built security platform for small enterprise and larger
remote branch offices.
The Nokia IP330 combines market-leading for intrusion protection, and additional good port capacity, synched firewalls in
security software and the Nokia IPSO™ partners through the Nokia Security “High Availability” environments, and
secure operating system for a secure, Developers Alliance. the industry-proven hardened Nokia IPSO
reliable and manageable security solution. operating system with patented IP
The IP330 is a cost-effective proven appli- The Nokia IP330 provides excellent value, Clustering. It has superb manageability
ance providing high reliability, a wide delivering robust firewall or VPN through- with the Nokia Network Voyager web-
selection of interface cards, VRRP and put to address real-world mixed traffic based and CLI interfaces. Nokia IPSO
clustering to achieve demanding small environments with the flexibility and supports a wide array of protocols, such
enterprise price/performance requirements capabilities expected from more expensive as RADIUS client server, TACACS+ Client
with maximum dependability. competitive systems. It can support financial, and others. In addition, the IP330 supports
medical, and other types of institutions Nokia Horizon Manager for secure man-
Nokia delivers industry-leading solutions with remote branches, or small stand-alone agement of version control, backup and
across Nokia IP security platforms that enterprise companies needing high relia- restore and other features.
meet stringent customer security needs bility and good performance at a low Total
by partnering with best-of-breed tech- Cost of Ownership (TCO). Best of all, security, performance and
nology partners. Nokia partners include reliability are all backed 24/7 by Nokia
Check Point Software Technologies for The Nokia IP330 has an optional encryption world-class First Call—Final Resolution
VPN-1/FireWall-1 security software, acceleration card, large routing tables support.
Internet Security Systems with RealSecure (BGP complex OSPF environments),
RESET
CONSOLE
LINK ACTIVITY
10/100
eth-s3
LINK ACTIVITY
10/100
eth-s4
LINK ACTIVITY
10/100
eth-s5 MODEM
POWER
FAULT
NOKIA
IP330
SECURED BY CHECKPOINT
Software Technologies
Corporate
Branch
Corporate Offices RESET
CONSOLE
LINK ACTIVITY
10/100
eth-s3
LINK ACTIVITY
10/100
eth-s4
LINK ACTIVITY
10/100
eth-s5 MODEM
POWER
FAULT
NOKIA
IP330
SECURED BY CHECKPOINT
Software Technologies
Office
Nokia
Security Intrusion Nokia IP330
Developers Protection
Alliance Systems
Email Email VPN VPN Small to Medium
Enterprise
Internet
Nokia IP740
Cluster VPN
Web Web
DMZ Port
Secure
Nokia IP330 at a Glance Connections
The Nokia IP330 is a purpose-built security platform for small enterprise and larger Reliable Manageable
remote branch offices.
Internet Protocols • SSHv2 (secure Telnet & FTP)
• IP RFC 791 • HTTP Server RFC 2068
• ICMP RFC 792 • SSL/TLS RFC 2246
• ARP RFC 826 • Command Line Utilities
• ICMP Router Discovery (Server) RFC 1256 • Supported in Nokia Horizon Manager
• CIDR RFC 1519 High Availability
• Static Routes • VRRP RFC 2338
• RIP RFC 1058 • FireWall-1 State Sync Nokia IP330
• RIP Version 2 (With authentication) • Clustering Small Enterprise,
RFC 1723 Corporate Branch Offices
• OSPF RFC 2328
Security
• Secure Administrative Access Standard:
• DVMRP (multicast) RFC 1075
• Read/Write and Read-Only Access Modes 3 integrated 10/100 Base-T Ethernet ports
• IGMP (multicast) RFC 2236
• SSH (secure Telnet & FTP) 1 CPCI slots for Network Interface Cards
• PIM-DM (multicast) Encryption and accelerator
• SSL/TLS (secure HTTP) RFC 2246
• PIM-SM
• S/Key (one-time password) RFC 1760 Optional Interfaces:
• Multicast Tunnels
• Access Control Lists - Dual port 10/100 Ethernet
• IGRP (optional) Cisco
• Traffic Management - Single port T1/E1 with CSU/DSU
• BGP4 (optional) RFC 1771
• MD5 Routing - Single port serial V.35/X.21
• IPv6 core RFCs
Copyright © Nokia Inc. 2003. All rights reserved. Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation. Check Point, the Check Point logo, FireWall-1, and VPN-1
• Authentication (RIPv2) RFC 1723
are trademarks or registered trademarks of Check Point Software Technologies, Ltd or its affiliates. Other trademarks mentioned are the property of their respective owners. Nokia operates
• Requirements for IPv4 Routers RFC 1812 Hardware:
• Centralized Authentication Height 1.75 in. / 4.5 cm (3U)
• Differentiated Services (EF) RFC 2598
• Native IPSec (for non-firewall applications) Depth 16 in. / 41 cm
• Bootp/DHCP Relay RFC 2131
a policy of continuous development. Therefore we reserve the right to make changes and improvements to any of the products described in this document without prior notice.
• DNS Client Width 17 in. / 44 cm
• Route Aggregation
• NTP Client and Server Weight 12 lbs / 5.4 kg
• Route Redistribution Standard 19-inch rack mountable
• RADIUS Client
• Un-numbered Interfaces Front access for maintenance
• TACACS+ Client
LAN Support
• 10/100 Mbps Ethernet
Application Acceleration Power Requirements:
• VPN Acceleration Card AC Input Voltage 100-120V/200-240VAC
WAN Support Frequency 50/60Hz
• PPP RFC 1661, 1662
System Status AC Input Current 1.8/1.0A
Indications
• Frame Relay FRF.1, RFC 1490
• 10/100 Ethernet port status
• HDLC Cisco
• Power, Warning, Fault
• T1/E1 (optional)
• V.35/X.21 (optional) Environment
• Temperature: 5°C to 40°C Safety
• ATM
• Humidity: 10% - 90% (non-condensing) • UL1950, CAN/CSA 22.2, No. 950-M95,
Statistics (CE Mark) EN60950:1992, A1, A2:1993,
• Altitude: 10,000 ft
• Firewall throughput (139 Mbps) A3:1995, A4:1997, A11:1998 with Japanese
• VPN throughput (22 Mbps (with card)) Supported Standards National Deviations
• IPSec (RFCs 2401-2411, 2451)
Management Emission Compliance
• PPTP (RFC 2637) Point to Point Tunneling
• SNMP RFC 1157 • FCC Part 15, Subpart B, Class A, EN50024,
Protocol
• SNMPv2c EN55022A 1998, CISPR 22 Class A 1985,
• L2TP (RFC 2661) Layer 2 Tunneling Protocol
• SNMPv3 EN61000-3-2, EN61000-3-3
• GRE (RFCs 1701 & 1702) Generic Routing
• Telnet RFC 854
Encapsulation Immunity
• FTP RFC 959
• NEBS III • EN55024 1998
Americas Asia Pacific Europe, Middle East and Africa
Tel: 1 877 997 9199 Tel: +65 6588 3364 France +33 170 708 166
Email:
[email protected] Email:
[email protected] UK +44 161 601 8908
Email:
[email protected] NI3 021 042