Nokia IP265 - Security Appliance Support and Manuals
Get Help and Manuals for this Nokia item
Most Recent Nokia IP265 Questions
Exporting Configuration.
Dear, I would like to export into a readable file the complete configuration of our Nokia IP265 bef...
Dear, I would like to export into a readable file the complete configuration of our Nokia IP265 bef...
(Posted by jr 12 years ago)
Popular Nokia IP265 Manual Pages
Security Guide - Page 3
... information on the full line of FIPS 140-2. This security policy describes the Nokia VPN Appliance and describes how it meets the security requirements of products from Nokia. 1 INTRODUCTION
1.1 Purpose
This document is used inside the Nokia VPN Appliances, including specific configuration instructions for the firmware can be found by referencing the Check Point VPN-1 FIPS 140-2 security...
Security Guide - Page 4
... by this Security Policy:
Model IP260 IP265 IP1220 IP1260
CPU Type Celeron Celeron Xeon Xeon
Firewall Speed 272Mbps 272Mbps 2.2Gbps 3.9Gbps
VPN Speed (AES, TDES) 113Mbps 113Mbps 1.2Gbps 1.7Gbps
© Copyright 2005, 2006, 2007 Nokia Page 4 of the Nokia VPN Appliances are differentiated through the use of the modules covered by using the Nokia Firewall Flows. VPN performance is...
Security Guide - Page 5
...following firmware combinations were used for VPN and firewall functionalities. All FRU upgrades are secured with identical components). The IP260 and IP265 hardware versions do not support FRU options. The following hardware versions:
ƒ IP260 / IP265 - therefore the Check Point module binary image was packaged into each module. The end-user has no option to service or install these...
Security Guide - Page 8
...-2) that operators can be done locally by using the console port or remotely by FIPS 140-2, as follows:
• Data input and output are the packets that use the firewall, VPN, and routing functionalities of the modules.
• Control input consists of manual control inputs for power and reset through the LEDs and the status data...
Security Guide - Page 9
... the CLI. Crypto Officer Services, Descriptions, Inputs, and Outputs
Description
Input
Output
Provide network connectivity and set a password for the admin account
Commands and configuration data(via local console)
Status of commands and configuration data
Critical Security Parameter (CSP) Access
Admin password (read/write access)
© Copyright 2005, 2006, 2007 Nokia Page 9 of 43
This...
Security Guide - Page 11
...; add firmware licenses to VLAN mapping
Commands and configuration data
Output
Status of commands and configuration data
Status of commands and configuration data
Status...Nokia Page 11 of commands and configuration data
Critical Security Parameter (CSP) Access None
Admin, monitor, user passwords; SSH host keys; configure Authentication, Authorization, and Accounting (AAA); Service...
Security Guide - Page 12
.... show SNMPv3 user commands
Commands and configuration data
Configure, manage, and view IPv6 settings through the CLI: view the platform configuration; configure static host names for particular IP addresses; view the disks that does not have IPv6 native support; manage IPSO images; specify other systems as network time protocol servers or peers; Service
Description
Input...
Security Guide - Page 13
...install security policies that are applied to help seed the PRNG, configure the one-time SIC password, and specify whether the VPN-1 services should automatically start at boot time
Command (cpconfig), menu options, and configuration information
Status of commands and menu options and status information (configuration information)
Check Point SmartDashBoard services
Create and configure users...
Security Guide - Page 14
... are described below.
© Copyright 2005, 2006, 2007 Nokia Page 14 of commands and status information (logs)
None
2.4.2 User Role
The User role accesses the module IPSec and IKE services. User Services, Descriptions, Inputs and Outputs
2.4.3 Authentication Mechanisms
The modules implement password-based authentication (console and SSH), RSA-based authentication (TLS, IKE and SSH), DSA...
Security Guide - Page 25
... Nokia module hardware data, which includes descriptions, parts data, part types, bills of Other Attacks The modules do not employ security mechanisms to enter the error state, where all cryptographic services and data output for the problem service is halted until the error state is maintained by the Crypto Officer to provide configuration management for document and source code management...
Security Guide - Page 26
... User is described in Section 3.2, "User Guidance".
3.1 Crypto Officer Guidance
The secure operation procedures include the initial setup, configuring ...memory (optional on
© Copyright 2005, 2006, 2007 Nokia Page 26 of operation to provide tamper evidence for evidence of the module at all times until the initial setup is initialized, the Crypto Officer must initialize the module and set...
Security Guide - Page 28
... Guide.
3.1.2 Installing, Upgrading or Downgrading the Module Firmware
New modules come preinstalled with Hotfix HFA-03.
© Copyright 2005, 2006, 2007 Nokia Page 28 of the cable to the module hard disk. a 2U Chassis with 2 Seals shown in right
picture)
3.1.1.2
Module Initialization
Before performing the initial configuration, the Crypto Officer must set the boot manager password...
Security Guide - Page 29
... 3.9. For older Nokia VPN Appliance modules, the Crypto Officer may need to upgrade the supplied IPSO and/or or the Check Point firmware so that may have a currently active session, and follow the Config->Manage Installed Packages sequence of links)
2. If the desired and installed IPSO/Check Point firmware versions match the validated configuration, no additional action...
Security Guide - Page 31
... and VPN-1 versions, run 'cpconfig' and follow the instructions in Section 3.1.6 of the "Installation Guide for enabling the additional groups and will also be freely reproduced and distributed whole and intact including this document. To support Groups 15-18, the Local Crypto-Officer must be configured for Diffie-Hellman Group 14 (2048 bit modulus) key...
Security Guide - Page 33
....1). These policies determine how the firewall and VPN services of 43
This document may be changed.
3.1.6 Management and Monitoring
After the initial setup, the Crypto Officer can manage the Check Point module with the following commands: set ssh hostkey v2 rsa size 1024 ` v2 dsa size 1024
6. The module can configure policies for either SSHv1...
Nokia IP265 Reviews
We have not received any reviews for Nokia yet.