1. VPN for Sales Nokia FireWall-1 Products Complete Integrated Solution including: –CheckPoint FireWall-1 enterprise security suite –Interfaces installed –No CD loads, SW installation, or O/S patches Easy-to-use Web based management tools Rapid deployment to decrease drain on IT resources

2. VPN for Sales Nokia FireWall-1 Platforms Carrier-Class Serviceability Redundant power supplies Hot swappable Interface Cards IP650IP650 Entry level appliance 3 10/100 Ethernet Interface Ports One Interface Slot on platform IP330IP330 Flexible, Scalable Interface Density IP440IP440

3. VPN for Sales Incorporates the Intel Pentium II processor (450MHz) Highest performance solution within the Nokia product family Hot swappable interface cards Redundant Power Supply Maximum number of interfaces and routes Hot Swappable NICs, Fans, Power Supplies Widest interface Selection (FDDI, ATM, HSSI, etc.) 5 Interface Slots: –WAN options: Single and Dual V35, X21, single only T1 –Quad Port 10/100 ET Card –ATM, FDDI, HSSI, TR –Modem ICSA Certified Nokia IP650 Series

4. VPN for Sales Nokia IP650 Ordering Information Base System (List Price: $16,995) IP600 Series Orderable Options –Network Interface Cards (List Price: $995-$1600) –Spares and Add-on Options –IPSO SW Options –Cables and Power Kits –Additional Documentation Check Point Firewall-1 Software Customer Support is ‘Required”

5. VPN for Sales High throughput integrated router/firewall platform utilizing Intel CPU technology (333Mhz PII) Large routing tables (64 or more routes) Supports high bandwidth applications Full partner application support Nokia IP440 Series 4 Interface Slots –WAN options: Single and Dual V35, X21, single only T1 –Quad Port 10/100 ET Card –ATM, FDDI, HSSI –Modem Hard Disk Mirroring Dynamic routing switch-over (provided by VRRP) Additional interfaces (FDDI, ATM, etc.) ICSA Certified

6. VPN for Sales Nokia IP440 Ordering Information 8 Bundled Configurations for IP440 Product Only Standard Enterasys Part Numbers Includes all hardware and software licensing fees LAN or LAN/WAN solutions Domestic or International Versions Pricing now excludes support IP440-P-L-USPrimary Firewall, LAN only, US/Canada version (3DES Encryption)$31,410 IP440-P-L-INTPrimary Firewall, LAN only, International version (DES Encryption)$31,410 IP440-P-LW-USPrimary Firewall, LAN/WAN, US/Canada version (3DES Encryption)$33,110 IP440-P-LW-INTPrimary Firewall, LAN/WAN, International Version (DES Encryption)$33,110 IP440-A-L-USAddOn Firewall, LAN only, US/Canada version (3DES Encryption)$20,910 IP440-A-L-INTAddOn Firewall, LAN only, International version (DES Encryption)$20,910 IP440-A-LW-USAddOn Firewall, LAN only, US/Canada version (3DES Encryption)$22.610 IP440-A-LW-INTAddOn Firewall, LAN only, International version (DES Encryption)$22,610

7. VPN for Sales Nokia IP330 Series Entry point series for entry level applications Some advanced interfaces Full partner application support 3 On-board 10/100 ET 1 Interface slot for: –WAN options: V35, X21, T1 –Dual Port 10/100 ET Card On-Board International Modem (optional) ICSA Certified

8. VPN for Sales Nokia IP330 Ordering Information Bundled configurations currently in system are restricted for one customer Must build configuration - same as IP650 –Base System (List Price - $4,950) –IP300 Series Orderable Options –Network Interface Cards (List Price - $995 - $1,600) –Spares and Add-on Options –IPSO SW Options –Cables and Power Kits –Additional Documentation –Check Point Firewall-1 Software

9. VPN for Sales ACCESS CONTROL ADDRESS TRANSLATION ENTERPRISE MANAGEMENT CONNECTION CONTROL CONTENT SECURITY ENCRYPTION AUTHENTICATION + Complete Check Point FireWall-1 Best-of-breed firewall SW The market leader in security software Stateful Inspection Total security management solution Numerous awards and industry honors Most competitive firewall offerings deliver only pieces of the solution

10. VPN for Sales FireWall-1 Security Suite Components Management Console Firewall Module Host Inspection Module Account Management Module Open Security Extension Connect Control Module Centralized security management for one or more security enforcement points Provides: –Access control –Authentication –Network address translation –Content security –Auditing –Multiple firewall synchronization Protects a single host, such as an application server Enables the use of an LDAP-compliant directory for user security information Centralized security management for third-party routers and security devices Performs load balancing of server traffic Core Components Optional Modules

11. VPN for Sales Configuring a Nokia/FireWall-1Solution  Select one of the IP440 packages that meets your customers requirements - these packaged systems includes everything you would need (base system, power, interface card, cables, and Checkpoint software.  If one of these packaged system bundles do not meet your customers requirements please proceed with the configuration starting with the base system.  Select one of the following Base System - please keep in mind that these are the "base systems" and do not include power, interfaces, cables, or Checkpoint software, etc.  IP330 (part number BB2330 or BB2331)  IP440 (part number BB1003 or one of the bundles)  IP650 (part number BB2650)  Select the correct power kit for the location desired  Select additional network interface cards, depending on the number of ports and technologies desired  If serial interface cards were selected, choose the correct cable for each port.  Redundancy options are available on the IP650 (Power Supply only) and on the IP440 (Hard drive only).  Choose the desired Check Point FireWall-1 applications (part numbers detailed in the attachment)  Firewall-1 Internet Gateway  Firewall-1 Enterprise Center  Firewall-1 Module  Services MUST be quoted !!!