Enterprise Firewall Bundle: FW1 - E440

The best-in-class firewall solution for enterprise data centers.
The E440 firewall bundle provides a premium level of security, performance, expandability, modularity, and fault tolerance for mission-critical applications. It is a key security enforcement point for e-business applications, high-volume Internet connections, or data centers that require security from the corporate backbone. The E440 integrates best-in-class networking capabilities with a fully functional version of the Check Point™ FireWall-1 application. This firewall bundle is ideal for ISPs, data centers, and other carrier class applications because it delivers a new class of integrated security solution that combines a high degree of serviceability, availability, scalability, and throughput.

Secure Enterprise Firewalling
The E440 is an integrated hardware/software solution that is tuned specifically to run Check Point's FireWall-1. By taking advantage of the high performance architecture of the Nokia IP440 firewall/router appliance platform, the E440 Firewall Bundle packs in more benefits than other platforms running FireWall-1, including enhanced security, performance, high availability, reliability, manageability, and routing.

The E440 also leverages the full capabilities of FireWall-1's Stateful Inspection software, the de facto standard for network security, invented and patented by Check Point. Stateful Inspection provides full application-layer awareness without requiring a separate proxy for every Internet service and protocol. This provides unparalleled performance, scalability, and the ability to support new and custom applications and services quickly and easily.

High-Performance Router Platform
The E440 integrates Nokia's IP440 modular firewall/router appliance platform. This platform is bundled with a quad 10/100 Ethernet card, a T1 CSU/DSU card, and a modem for remote management. This configuration leaves one slot available for future expansion.

Security
Since the Nokia appliance's only purpose is to run FireWall-1, its proprietary IPSO operating system is not prone to the many, well publicized security holes found in most general purpose operating systems that were not developed with the sole purpose of providing security. IPSO's enhanced security makes the E440 a perfect choice for security-conscious data centers.

Performance
Because it's engineered specifically to run Check Point FireWall-1, Nokia's IPSO makes the most of the hardware's capabilities, delivering a packet-forwarding rate of over 90Mbps – a speed that leaves all but the highest performing multiprocessor UNIX hosts behind.

High Availability
To ensure high-availability, the E440 Nokia IPSO utilizes Virtual Router Redundancy Protocol (VRRP), which enhances the fail-over capabilities of FireWall-1. By using shared IP and MAC addresses on two or more Nokia platforms, computers on the network automatically fail-over to a backup firewall in the event of network failure. With multiple shared addresses, network administrators can do load balancing among multiple firewalls – an enhancement to FireWall-1 not found in other platforms. The integration of additional fully configured firewalls is accomplished by ordering the FW1-E440-A.

Reliability
Unlike a general purpose operating system, the only purpose of the IPSO software is to support FireWall-1, ensuring Nokia's commitment to maintain integration between IPSO and FireWall-1. Likewise, Check Point is equally committed to providing a premium level of support for the Nokia platforms.

Manageability
By utilizing the intuitive Voyager® interface, the E440 appliance platform is fully manageable through a Web browser. This innovation allows the platform to be securely managed from anywhere in the network. The E440 can also be managed through a serial cable connected to its console port, via integrated analog modem, or through telnet and secure shell (SSH – encrypted telnet). The high degree of manageability of this platform virtually eliminates the need to physically travel to the equipment after initial installation.

Routing
The Nokia IPSO software adds full router functionality (including upgrade capability for BGP), allowing the E440 Firewall Bundle to fully integrate into any network environment. The ability to add many different types of interfaces after installation, including T1 and T3, only adds to its versatility. In fact, the inclusion of a T1 interface to the E440 eliminates the need to front-end the firewall with a router, which is necessary with most other firewall platforms.

Industry-Leading Maintenance and Support
The E440 comes bundled with premium-level manufacturer support for a year after installation through the Gold Plus Program. The bundle includes software subscription and updates for a full year for both the Nokia IPSO and Check Point FireWall-1, advanced hardware replacement, 24/7 phone support, online knowledge-base access, and a guaranteed four-hour service response time. Gold Plus Support can be renewed annually.

Installation and Configuration Expertise
Recognized by the industry as experts in design, integration, and implementation, the members of the Network Security Practice offer an unparalleled level of expertise and experience in the subtleties of network security. This is particularly important considering that nearly all firewall breaches occur because of misconfiguration rather than by any failure in the firewall itself. All Venture Technologies Firewall Bundles and enhancement packages are fully tested and installed on your site by the security engineers of Venture Technologies' Network Security Practice.