VP

N for S

alesNokia FireWall-1 Products

• Complete Integrated Solution including: – CheckPoint FireWall-1 enterprise security suite

– Interfaces installed

– No CD loads, SW installation, or O/S patches

• Easy-to-use Web based management tools

• Rapid deployment to decrease drain on IT resources

VP

N for S

alesNokia FireWall-1 Platforms

• Carrier-Class Serviceability• Redundant power supplies • Hot swappable Interface Cards

•IP650IP650

• Entry level appliance• 3 10/100 Ethernet Interface Ports• One Interface Slot on platform

•IP330IP330

• Flexible, Scalable• Interface Density

•IP440IP440

VP

N for S

ales

• Incorporates the Intel Pentium II processor (450MHz)

• Highest performance solution within the Nokia product family

• Hot swappable interface cards

• Redundant Power Supply

• Maximum number of interfaces and routes

• Hot Swappable NICs, Fans, Power Supplies

• Widest interface Selection (FDDI, ATM, HSSI, etc.)

• 5 Interface Slots:

– WAN options: Single and Dual V35, X21, single only T1

– Quad Port 10/100 ET Card

– ATM, FDDI, HSSI, TR

– Modem

• ICSA Certified

Nokia IP650 Series

VP

N for S

alesNokia IP650 Ordering Information

• Base System (List Price: $16,995)• IP600 Series Orderable Options

– Network Interface Cards (List Price: $995-$1600)– Spares and Add-on Options– IPSO SW Options– Cables and Power Kits– Additional Documentation

• Check Point Firewall-1 Software• Customer Support is ‘Required”

VP

N for S

ales

• High throughput integrated router/firewall platform utilizing Intel CPU technology (333Mhz PII)

• Large routing tables (64 or more routes)

• Supports high bandwidth applications

• Full partner application support

Nokia IP440 Series

• 4 Interface Slots

– WAN options: Single and Dual V35, X21, single only T1

– Quad Port 10/100 ET Card

– ATM, FDDI, HSSI

– Modem

• Hard Disk Mirroring

• Dynamic routing switch-over (provided by VRRP)

• Additional interfaces (FDDI, ATM, etc.)

• ICSA Certified

VP

N for S

alesNokia IP440 Ordering Information• 8 Bundled Configurations for IP440 Product Only

• Standard Enterasys Part Numbers

• Includes all hardware and software licensing fees

• LAN or LAN/WAN solutions

• Domestic or International Versions

• Pricing now excludes supportIP440-P-L-US Primary Firewall, LAN only, US/Canada version (3DES Encryption) $31,410

IP440-P-L-INT Primary Firewall, LAN only, International version (DES Encryption) $31,410

IP440-P-LW-US Primary Firewall, LAN/WAN, US/Canada version (3DES Encryption)$33,110

IP440-P-LW-INT Primary Firewall, LAN/WAN, International Version (DES Encryption)$33,110

IP440-A-L-US AddOn Firewall, LAN only, US/Canada version (3DES Encryption) $20,910

IP440-A-L-INT AddOn Firewall, LAN only, International version (DES Encryption) $20,910

IP440-A-LW-US AddOn Firewall, LAN only, US/Canada version (3DES Encryption)$22.610

IP440-A-LW-INT AddOn Firewall, LAN only, International version (DES Encryption)$22,610

VP

N for S

alesNokia IP330 Series

• Entry point series for entry level applications

• Some advanced interfaces

• Full partner application support

• 3 On-board 10/100 ET

• 1 Interface slot for:

– WAN options: V35, X21, T1

– Dual Port 10/100 ET Card

• On-Board International Modem (optional)

• ICSA Certified

VP

N for S

alesNokia IP330 Ordering Information

• Bundled configurations currently in system are restricted for one customer

• Must build configuration - same as IP650

– Base System (List Price - $4,950)

– IP300 Series Orderable Options

– Network Interface Cards (List Price - $995 - $1,600)

– Spares and Add-on Options

– IPSO SW Options

– Cables and Power Kits

– Additional Documentation

– Check Point Firewall-1 Software

VP

N for S

ales

ACCESS CONTROL

ADDRESS TRANSLATION

ENTERPRISE MANAGEMENT

CONNECTION CONTROL

CONTENT SECURITYENCRYPTION

AUTHENTICATION

+

Complete Check Point FireWall-1

• Best-of-breed firewall SW

• The market leader in security software

• Stateful Inspection

• Total security management solution

• Numerous awards and industry honorsMost competitive firewall

offerings deliver only pieces ofthe solution

VP

N for S

alesFireWall-1 Security Suite Components

Management Console

Firewall Module

Host Inspection Module

Account Management Module

Open Security Extension

Connect Control Module

Centralized security management for one or more security enforcement points

Provides:– Access control– Authentication– Network address translation– Content security– Auditing– Multiple firewall synchronization

Protects a single host, such as an application server

Enables the use of an LDAP-compliant directory for user security information

Centralized security management for third-party routers and security devices

Performs load balancing of server traffic

Co

reC

om

po

nen

tsO

pti

on

alM

od

ule

s

VP

N for S

alesConfiguring a Nokia/FireWall-1Solution Select one of the IP440 packages that meets your customers requirements - these packaged

systems includes everything you would need (base system, power, interface card, cables, and Checkpoint software.

If one of these packaged system bundles do not meet your customers requirements please proceed with the configuration starting with the base system.

Select one of the following Base System - please keep in mind that these are the "base systems" and do not include power, interfaces, cables, or Checkpoint software, etc.

IP330 (part number BB2330 or BB2331) IP440 (part number BB1003 or one of the bundles) IP650 (part number BB2650)

Select the correct power kit for the location desired Select additional network interface cards, depending on the number of ports and technologies

desired If serial interface cards were selected, choose the correct cable for each port. Redundancy options are available on the IP650 (Power Supply only) and on the IP440 (Hard

drive only). Choose the desired Check Point FireWall-1 applications (part numbers detailed in the

attachment) Firewall-1 Internet Gateway Firewall-1 Enterprise Center Firewall-1 Module

Services MUST be quoted !!!