Nokia IP390
Nokia IP390 security platform, running Check Point VPN-1, is highly-versatile and easy to install and manage. With an intuitive out-of-box experience, Nokia IP390 provides the sophisticated management and security essential for large businesses requiring high performance perimeter security and internal network segmentation.
Nokia IP390 delivers over 3 Gbps of Ethernet for firewall traffic and a total throughput of 600 Mbps encrypted traffic through the included 4-port 1000BaseT Ethernet card in a 1RU security platform. Nokia IP390 offers the option of either disk, flash or hybrid-based storage configurations. The hybrid configuration uses flash storage for Nokia IPSO Check Point enforcement module, and local disk for management and logging. With the option for 8 ports of Gigabit Ethernet, Nokia IP390 offers equivalent port density, firewall performance, superior security and manageability to competitive systems costing more than twice as much.
Features
- Nokia IPSO designed for network security, VRRP and IP Clustering HA functionality
- 1RU form factor, disk-, flash-based or hybrid configuration
- 2 front-facing PCI-X PMC expansion slots
- 4 integrated 10/100/1000 Ethernet interfaces, 2 integrated PCMCIA slots
- 1GB RAM, expandable to up to 2GB of RAM
Benefits
- Trusted hardware reliability – simple, yet comprehensive, security and management
- Best-in-class price performance
- Investment protection - ability to add additional ports as capacity requirements grow
- Rack-dense form factor saves space and facility costs
- Single vendor for customer service and support
Available software
Nokia IP390
Internet protocols
- IP RFC 791
- ICMP RFC 792
- ARP RFC 826
- ICMP Router Discovery (server) RFC 1256
- Router Discovery v6 (ICMP v6) RFC 2466
- CIDR RFC 1519
- Static Routes
- RIP RFC 1058
- RIP Version 2 (with authentication) RFC 1723
- RIPng (IPv6) RFC 2080
- OSPF RFC 2328
- OSPF NSSA RFC 3101
- OSPFv3 (IPv6) RFC 2740
- DVMRP (multicast) RFC 1075
- IGMP (multicast) RFC 2236, IGMPv3 RFC 3376
- PIM-SM and PIM-SSM RFC 4601
- PIM-DM RFC 3973
- PIM-DM State Refresh draft-ietf-pim-refresh-02.txt
- Multicast Tunnels
- IGRP (optional) Cisco
- BGP4 (optional) RFC 1771
- BGP4++ RFC 2545, 2858 (unicast IPv6)
- IPv4 RFC 791
- IPv6 core RFCs
- VRRPv2 RFC 3768
- VRRPv3 (IPv6) draft-ietf-vrrp-ipv6-spec-08.txt
- Mobile IP (IPv4) RFC 2794, RFC 3024, RFC 3344, RFC 3519
- Requirements for IPv4 Routers RFC 1812
- Differentiated Services (EF) RFC 2598
- Bootp/DHCP Relay RFC 2131
- Route Aggregation & Redistribution
- Unnumbered Interfaces
- Link negotiation IEEE 802.3
- Flow control IEEE 802.3
- Private (RFC 1918) and Public IP Routing
- VLAN 802.3Q
LAN support
- 10/100 BASE-TX (10/100 Mbps Ethernet), copper
- 1000 BASE-T (10/100/1000 Mbps Ethernet), copper
- 1000 BASE-SX (1000 Mbps Ethernet), MMF Fiber
Performance
- Firewall - large packets 3.0 Gbps
- VPN - large packets 500 Mbps, AES256
- CPS - 30,000 CPS
Management
- SNMP RFC 1157, SNMPv2c, SNMPv3
- Telnet RFC 854
- FTP RFC 959
- SSHv2 (secure Telnet and FTP)
- HTTP Server RFC 2068
- SSL/TLS RFC 2246
- Command Line Utilities
- Supported in Nokia Horizon Manager
Environment
- Temperature: 23°F to 113°F / -5°C to 45°C
- Humidity: 10% - 90% (non-condensing)
- Altitude: 10,000 feet
High availability
- VRRP RFC 2338
- FireWall-1 State Sync
- Patented Nokia IP Clustering
Security
- Secure Administrative Access
- Role-Based Administration
- 3rd party administrator authorization
- Read/Write and Read-Only Access Modes
- SSH (secure Telnet and FTP)
- SSL/TLS (secure HTTP) RFC 2246
- S/Key (one-time password) RFC-1760
- Access Control Lists
- Traffic Management
- MD5 Routing
- Authentication (RIPv2) RFC 1723
- Centralized Authentication
- Native IPSec (for non-firewall applications)
- DNS Client, NTP Client and Server
- RADIUS Client, TACACS+ Client
System indicators
- 10/100/1000 Ethernet port status
- Power status on system
- Failure status on system
- Port status on network interface cards
- System Operational Indicator
Supported standards
- IPSec (RFCs 2401-2411, 2451)
- GRE (RFCs 1701 and 1702) Generic Routing Encapsulation
- Designed to meet FIPS 140-2
- Directive 2002/95/EC Restriction of the Use of Certain Hazardous Substances in Electrical and Electronic Equipment (RoHS)
- Directive 2002/96/EC Waste Electrical and Electronic Equipment (WEEE)
Safety
UL1950, CAN/CSA 22.2, No. 950- M95, (CE Mark) EN60950:1992, A1, A2:1993, A3:1995, A4:1997, A11:1998 with Japanese National Deviations Emission Compliance
Emissions compliance
- FCC Part 15, Subpart B, Class A, EN50024, EN55022A: 1998, CISPR 22 Class A: 1985, EN61000-3-2, EN61000-3-3
Immunity
Base system configuration
- 1GB System RAM, expandable to 2GB
- 4 integrared 10/100/1000 Ethernet interfaces
- Integrated PCMCIA slot
Optional PMC cards
- 4-port 10/100 BASE-TX, copper
- 2-port 10/100/1000 BASE-T, copper
- 2-port 1000 BASE-SX, MMF
Dimensions
- Height – 1.75 in (4.4 cm) - 1U
- Width – 17 in (43.2 cm) without mounting brackets - 1U; or 19 in (48.2 cm) with mounting brackets
- Depth – 17 in in (43.2 cm)
- Depth – 17.5 in (44.5 cm) at handles, standard bracket position
- Weight – 18 lbs (8.2 kg) with mounting >brackets
- Front access for upgrades and maintenance
Power requirements
- AC Input 100-120V / 200-240V
- Frequency 50 / 60 Hz
- AC Input Current 3A
Support
Nokia offers world-class global support and services to service providers, distributors, resellers and enterprise customers who buy, sell and use Nokia security and mobility products. Nokia is recognized for world-class support and is dedicated to excellence with Technical Assistance Centers around the world, and on-site service capabilities in 1,000+ metropolitan areas covering more than 150 countries.
- Global network of 7x24x365 Technical Assistance Centers
- Nokia First Call - Final Resolution support
- Worldwide product part spares and on-site services
- Software Subscription service delivers updates, minor feature releases and device compatibility
Visit business services and support for more information.
Nokia IP390 security platform is a firewall/VPN appliance combining best-of-breed Check Point VPN-1 security and manageability, with a purpose-built Nokia IPSO-based network security appliance. Nokia IP390 offers large-business performance and port headroom in a rack-dense 1RU form factor, giving customers a competitively priced, mid-range appliance with unprecedented performance and port density for this class of system.
