Nokia Network Security Solutions Handbook

Since the Nokia appliance is already hardened, there is very little you need to do to prepare it for firewall installation. You must configure and test networking and DNS and set up the Host Address Assignment through the Voyager GUI, and you might need to upgrade your IPSO and boot manager (see Chapter 5).
Ensure that you have the following ready before you begin configuring Check Point FireWall-1:
Get your Check Point licenses.
Configure routing and test network interface cards.
Ensure IP forwarding is enabled ( ipsofwd on admin).
Configure Host Address Assignment.
Ensure you have at least 128MB of memory and 40MB of free disk space on /opt.
Read the Release Notes.
Verify that your IPSO is compatible with VPN-1/FireWall-1 (see Table 6.1).
| IPSO Version | VPN-1/FireWall-1 Compatibility |
|---|---|
| IPSO 3.2.x | 4.0 any service pack and 4.1 up to SP2 |
| IPSO 3.3 FCS3 | 4.1 SP2 and SP3 |
| IPSO 3.3 FCS6, FCS8 (not to be used with IP530) | 4.1 SP3 |
| IPSO 3.3E FCS4 (not to be used with IP530) | 4.1 SP3 |
| IPSO 3.3.1 FCS7 (IP530 only) | 4.1 SP3 |
| IPSO 3.4 | 4.1 SP4 |
| IPSO 3.4.1 FCS5a | 4.1 SP5 |
| IPSO 3.4.1 FCS10-FCS12 | 4.1 SP5a and SP6 |
| IPSO 3.4.2 | NG FP1 |
| IPSO 3.5 FCS3 | 4.1 SP5a |
| IPSO 3.5 FCS6-FCS8 | 4.1 SP5a, SP6 and NG FP2 |
| IPSO 3.5 FCS10 | 4.1 SP5a, SP6, NG FP2 and FP3 |
| IPSO 3.6 | NG FP2 and FP3 |
For the most recent FireWall-1/IPSO compatibility matrix, look up Nokia Resolution 11253.
Check...