Nokia FireWall-1 Products

1. Nokia FireWall-1 Products VPN for Sales • Complete Integrated Solution including: • CheckPoint FireWall-1 enterprise security suite • Interfaces installed • No CD loads, SW installation, or O/S patches • Easy-to-use Web based management tools • Rapid deployment to decrease drain on IT resources

2. IP650 • Carrier-Class Serviceability • Redundant power supplies • Hot swappable Interface Cards • IP440 • Flexible, Scalable • Interface Density • IP330 • Entry level appliance • 3 10/100 Ethernet Interface Ports • One Interface Slot on platform Nokia FireWall-1 Platforms VPN for Sales

3. Incorporates the Intel Pentium II processor (450MHz) Highest performance solution within the Nokia product family Hot swappable interface cards Redundant Power Supply Maximum number of interfaces and routes Hot Swappable NICs, Fans, Power Supplies Widest interface Selection (FDDI, ATM, HSSI, etc.) 5 Interface Slots: WAN options: Single and Dual V35, X21, single only T1 Quad Port 10/100 ET Card ATM, FDDI, HSSI, TR Modem ICSA Certified Nokia IP650 Series VPN for Sales

4. Nokia IP650 Ordering Information VPN for Sales • Base System (List Price: $16,995) • IP600 Series Orderable Options • Network Interface Cards (List Price: $995-$1600) • Spares and Add-on Options • IPSO SW Options • Cables and Power Kits • Additional Documentation • Check Point Firewall-1 Software • Customer Support is ‘Required”

5. High throughput integrated router/firewall platform utilizing Intel CPU technology (333Mhz PII) Large routing tables (64 or more routes) Supports high bandwidth applications Full partner application support 4 Interface Slots WAN options: Single and Dual V35, X21, single only T1 Quad Port 10/100 ET Card ATM, FDDI, HSSI Modem Hard Disk Mirroring Dynamic routing switch-over (provided by VRRP) Additional interfaces (FDDI, ATM, etc.) ICSA Certified Nokia IP440 Series VPN for Sales

6. Nokia IP440 Ordering Information VPN for Sales • 8 Bundled Configurations for IP440 Product Only • Standard Enterasys Part Numbers • Includes all hardware and software licensing fees • LAN or LAN/WAN solutions • Domestic or International Versions • Pricing now excludes support IP440-P-L-US Primary Firewall, LAN only, US/Canada version (3DES Encryption) $31,410 IP440-P-L-INT Primary Firewall, LAN only, International version (DES Encryption) $31,410 IP440-P-LW-US Primary Firewall, LAN/WAN, US/Canada version (3DES Encryption) $33,110 IP440-P-LW-INT Primary Firewall, LAN/WAN, International Version (DES Encryption) $33,110 IP440-A-L-US AddOn Firewall, LAN only, US/Canada version (3DES Encryption) $20,910 IP440-A-L-INT AddOn Firewall, LAN only, International version (DES Encryption) $20,910 IP440-A-LW-US AddOn Firewall, LAN only, US/Canada version (3DES Encryption) $22.610 IP440-A-LW-INT AddOn Firewall, LAN only, International version (DES Encryption) $22,610

7. Entry point series for entry level applications Some advanced interfaces Full partner application support 3 On-board 10/100 ET 1 Interface slot for: WAN options: V35, X21, T1 Dual Port 10/100 ET Card On-Board International Modem (optional) ICSA Certified Nokia IP330 Series VPN for Sales

8. Nokia IP330 Ordering Information VPN for Sales • Bundled configurations currently in system are restricted for one customer • Must build configuration - same as IP650 • Base System (List Price - $4,950) • IP300 Series Orderable Options • Network Interface Cards (List Price - $995 - $1,600) • Spares and Add-on Options • IPSO SW Options • Cables and Power Kits • Additional Documentation • Check Point Firewall-1 Software

9. Complete Check Point FireWall-1 + VPN for Sales • Best-of-breed firewall SW • The market leader in security software • Stateful Inspection • Total security management solution • Numerous awards and industry honors ACCESS CONTROL ENTERPRISE MANAGEMENT AUTHENTICATION CONNECTION CONTROL ENCRYPTION CONTENT SECURITY ADDRESS TRANSLATION Most competitive firewall offerings deliver only pieces of the solution

10. FireWall-1 Security Suite Components • Centralized security management for one or more security enforcement points • Provides: • Access control • Authentication • Network address translation • Content security • Auditing • Multiple firewall synchronization • Protects a single host, such as an application server • Enables the use of an LDAP-compliant directory for user security information • Centralized security management for third-party routers and security devices • Performs load balancing of server traffic Management Console Firewall Module Host Inspection Module Account Management Module Open Security Extension Connect Control Module VPN for Sales CoreComponents OptionalModules

11. Configuring a Nokia/FireWall-1Solution VPN for Sales • Select one of the IP440 packages that meets your customers requirements - these packaged systems includes everything you would need (base system, power, interface card, cables, and Checkpoint software. • If one of these packaged system bundles do not meet your customers requirements please proceed with the configuration starting with the base system. • Select one of the following Base System - please keep in mind that these are the "base systems" and do not include power, interfaces, cables, or Checkpoint software, etc. • IP330 (part number BB2330 or BB2331) • IP440 (part number BB1003 or one of the bundles) • IP650 (part number BB2650) • Select the correct power kit for the location desired • Select additional network interface cards, depending on the number of ports and technologies desired • If serial interface cards were selected, choose the correct cable for each port. • Redundancy options are available on the IP650 (Power Supply only) and on the IP440 (Hard drive only). • Choose the desired Check Point FireWall-1 applications (part numbers detailed in the attachment) • Firewall-1 Internet Gateway • Firewall-1 Enterprise Center • Firewall-1 Module • Services MUST be quoted !!!