Nokia IP Security Solutions

Nokia for
Business
Nokia IP Security Solutions
Nokia IP1260
Nokia IP1260 supports high performance
traffic levels prevalent in complex
network infrastructures deployed
by large enterprise, service providers,
and data centers.
organizations needing to secure several
10/100 Ethernet internal network segments
or a few Gigabit Ethernet network segments.
These platforms are also ideal for companies
that require robust, large enterprise
performance combined with ease of
Nokia IP1260 incorporates leading technology
management and high reliability.
for a resilient long-term perimeter and
internal security solution with performance
Nokia continues to deliver industry-leading
for high traffic sites. It combines marketsolutions to meet stringent customer
security needs with best-of-breed Check Point
leading firewall/VPN software with the Nokia
IPSO™ secure operating system on a purpose- Software Technologies VPN-1 Pro network
built and designed hardware platform. From
security application. Nokia IP1260 combines
inception, Nokia IP1260 was designed for
excellent price/performance with superb
growth to continually meet increasing
management to deliver the industry’s best
network traffic needs. To ensure maximum
power, redundancy, and overall capabilities
to effectively support large financial
performance and network uptime, Nokia
IP1260 provides redundant features in Nokia
institutions, high-end service providers,
large enterprise, and carrier and data
IPSO, such as VRRP and Nokia IP Clustering,
center networks—all at a low Total Cost
as well as built-in hardware redundancy
capabilities. The redundant hardware features of Ownership.
include hot swap interface cards, load sharing
power supplies and fans, and mirrored hot
swap hard disks.
Nokia IP1260, like most Nokia Firewall/VPN
Appliances, offers the option of either diskor flash-based storage configurations.
Additionally, Nokia IP1260 can be configured
with hybrid (flash and compact disk) local
storage. The Nokia IP1260 hybrid
configuration uses flash storage for Nokia
IPSO and the Check Point enforcement
module, and local disk for management
and logging.
This system has excellent price/performance
and can be used in diverse environments
to protect large and enterprise frameworks
needing a Gigabit throughput-capable
perimeter security solution, as well as
The value of Nokia IP1260 is further
enhanced with a high-speed encryption
accelerator card, dual power supply, mirrored
hard disks, and 1GB of memory included in
the base system so it is delivered redundantready. Nokia IP1260 has excellent expansion
capacity to connect a multitude of network
segments for a large and growing network
infrastructure. Additionally, it can be
managed by web-based Nokia Network
Voyager interface, a command line interface
for single device management, or Nokia
Horizon Manager for multi-device
management. Nokia IPSO brings added
value to Nokia IP1260 with support for a
wide array of protocols, such as RADIUS
client server, TACACS+ Client, and others.
Best of all, security, performance, and
reliability are all backed by world-class Nokia
First Call—Final Resolution global support.
Small Remote Office/Branch Office (ROBO)
Corporate Offices
Nokia
Security
Developers
Alliance
Nokia IP40 Satellite
Intrusion
Protection
Systems
Small to Large
Enterprise Sites
VPN
Email
Email
Internet
VPN
VPN
VPN
VPN
VPN
Web
Web
IP710
IP710
Nokia IP1260
Cluster
DMZ Port
Nokia IP130
Small
to
Medium
ROBO
Various Nokia IP
Security Platforms
Technical Specifications
Security
NI3 044 007
Copyright © 2006 Nokia. All rights reserved. Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation. Other trademarks mentioned are the property of their respective owners. Nokia operates a policy of continuous development. Therefore, we reserve
the right to make changes and improvements to any of the products described in this document without prior notice. Check Point, the Check Point logo, VPN-1 and FireWall-1 are trademarks, service marks, or registered trademarks of Check Point Software Technologies Ltd.
Internet Protocols
• ARP
• BGP-4 [software option]
• Bootp/DHCP Relay
• CIDR
• COPS
• Diff Serv (Expedited
Forwarding)
• DVMRP
• GRE
• ICMP
• ICMP Router Discovery
• IGMP
• IGRP [software option]
• IP (RFC 791)
• IPv6 Core Protocols
• OSPF
• PIM-DM
• PIM-SM
• Multicast Tunnels
• RIP
• RIPv2 with MD5 Authentication­
• Route Aggregation
• Route Redistribution
• Static Routes
• UDP
• Unnumbered Interfaces
LAN Support
• 10/100 Mbps Ethernet
• 10/100/1000 Mbps Ethernet
• 1000 Mbps Ethernet MMF
• PPP
• T1/E1 [interface card option]
• V.35 [interface card option]
• X.21 [interface card option]
- 59,000 FW Connections
Per Second
• EAL4 Common Criteria
(ISO/IEC 15408)
• UL1950, CAN/CSA 22.2,
No. 950-M95, (CE Mark)
EN60950:1992, A1, A2:1993,
A3:1995, A4:1997, A11:1998
with Japanese National
Deviations
Emission Compliance
• FCC Part 15, Subpart B, Class
A, EN50024, EN55022A:
1998, CISPR 22 Class A 1985,
EN61000-3-2, EN61000-3-3
Immunity
Optional PMC Network Interface Card
• Firewall Flows
• Dual port 10/100 Ethernet
• Dual port Multimode Fiber
(MMF) Gigabit Ethernet
• Single port V.35, Single port X.21
• 4 integrated 10/100
management ports
• 2 6U CPCI slots for 4 PMC NICs
• 2 Type II PCMCIA slots
• Nokia Encryption
Accelerator IV
• 1GB system RAM,
expandable to 2GB
• Single port ISDN BRI S/T
• T1 single port
• E1 single port
• Dual port Gigabit Ethernet, Cu
Dimensions
• Altitude: 10,000 ft.
High Availability
• Hot Swap
• Disk Mirroring
• Nokia IP Clustering
• NEBS III
• SSH (for CLI)
• SSL/TLS (for Nokia Network
Voyager)
• Telnet (for CLI)
• Supported in Nokia
Horizon Manager
Environment
• Temperature:
41°F to 104°F / 5°C to 40°C
• Humidity: 10% - 90%
(non-condensing)
• Operational, activity,
hard drive hot swap status
• Power PMC carrier card
Standard
Application Acceleration
• VPN Acceleration
• Power and Fault
• Port Status
• EN55024: 1998
Management
• Nokia Network Voyager
(HTTP server)
• Command Line Interface (CLI)
• Command Line Utilities
• DHCP
• FTP
• SNMPv1/v2c/v3
System Indicators
Safety
Performance
• Firewall - large packets
4.0 Gbps
• VPN - large packets
1.5 Gbps 3DES, AES
• RADIUS Client
• Read/Write and Read-Only
Administrative Access
• S/Key (one-time password)
• SSH
• SSL/TLS
• TACACS+ Client
• Traffic Management
Certifications
• Transparent (Bridging) Mode
• VLAN Tagging
WAN Support
• Frame Relay
• HDLC (Cisco-compatible)
• HSSI [interface card option]
• ISDN [interface card option]
• Access Control Lists
• Centralized Authentication
• Cryptographic Acceleration
• DNS Client
• IPSec
• MD5 Routing Authentication
(RIPv2)
• NTP Client and Server
• Height: 3.46 in / 8.79 cm
– 2RU
• Width: 19 in / 48 cm –
with rack mounting ears
Power Requirements
• VRRP
• Check Point VPN-1/FireWall-1
State Sync
European Customer Enquiry Numbers
France +33 170 708 166
Spain +34 914 140 777
Germany +49 692 222 203 68
Sweden +46 856 610 789
Italy +39 02 36003652
UK +44 161 601 8908
• AC Input Voltage
100-120V/200-240VAC
• Frequency 50/60Hz
• AC Input Current 3.0/1.5A
• DC Input Voltage 48VDC
Email: ipsecurity.emea@nokia.com
www.nokiaforbusiness.com
• Depth: 21.15 in / 53.72 cm
• Weight: 36 lbs / 16 kg
• Front access for maintenance