Nokia Network Security Solutions Handbook

434 Pages·2002·8.346 MB·English

by  Syngress, Doug Maxwell

234_nokia_FM_4.qxd 10/31/02 10:47 AM Page i
s o l u t i o n s @ s y n g r e s s . c o m
With more than 1,500,000 copies of our MCSE, MCSD, CompTIA, and Cisco
study guides in print, we continue to look for ways we can better serve the
information needs of our readers. One way we do that is by listening.
Readers like yourself have been telling us they want an Internet-based ser-
vice that would extend and enhance the value of our books. Based on
reader feedback and our own strategic plan, we have created a Web site
that we hope will exceed your expectations.
[email protected] is an interactive treasure trove of useful infor-
mation focusing on our book topics and related technologies. The site
offers the following features:
(cid:2) One-year warranty against content obsolescence due to vendor
product upgrades. You can access online updates for any affected
chapters.
(cid:2) “Ask the Author” customer query forms that enable you to post
questions to our authors and editors.
(cid:2) Exclusive monthly mailings in which our experts provide answers to
reader queries and clear explanations of complex material.
(cid:2) Regularly updated links to sites specially selected by our editors for
readers desiring additional reliable information on key topics.
Best of all, the book you’re now holding is your key to this amazing site.
Just go to www.syngress.com/solutions, and keep this book handy when
you register to verify your purchase.
Thank you for giving us the opportunity to serve your needs. And be sure
to let us know if there’s anything else we can do to help you get the
maximum value from your investment. We’re listening.
www.syngress.com/solutions
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page ii
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page iii
1 YEAR UPGRADE
BUYER PROTECTION PLAN
Nokia
Network
Security
S o l u t i o n s H a n d b o o k
Doug Maxwell
Cherie Amon
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page iv
Syngress Publishing,Inc.,the author(s),and any person or firm involved in the writing,editing,or
production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results
to be obtained from the Work.
There is no guarantee of any kind,expressed or implied,regarding the Work or its contents.The Work
is sold AS IS and WITHOUT WARRANTY.You may have other legal rights,which vary from state
to state.
In no event will Makers be liable to you for damages,including any loss of profits,lost savings,or
other incidental or consequential damages arising out from the Work or its contents.Because some
states do not allow the exclusion or limitation of liability for consequential or incidental damages,the
above limitation may not apply to you.
You should always use reasonable care,including backup and other appropriate precautions,when
working with computers,networks,data,and files.
Syngress Media®,Syngress®,“Career Advancement Through Skill Enhancement®,”and “Ask the
Author UPDATE®,”are registered trademarks of Syngress Publishing,Inc.“Mission Critical™,”“Hack
Proofing®,”and “The Only Way to Stop a Hacker is to Think Like One™”are trademarks of Syngress
Publishing,Inc.Brands and product names mentioned in this book are trademarks or service marks of
their respective companies.
KEY SERIAL NUMBER
001 GYF7M3UV43
002 Q2CVPK9H7F
003 N7T65TAUX3
004 Z8J9HFU29Y
005 U8MB76NH3S
006 4ES8PT5R36
007 G8DX6B7NC4
008 PQ2AKJ6RD7
009 SW9BKMV6FH
010 5BVE4KP79Z
PUBLISHED BY
Syngress Publishing,Inc.
800 Hingham Street
Rockland,MA 02370
Nokia Network Security Solutions Handbook
Copyright © 2002 by Syngress Publishing,Inc.All rights reserved.Printed in the United States of
America.Except as permitted under the Copyright Act of 1976,no part of this publication may be
reproduced or distributed in any form or by any means,or stored in a database or retrieval system,
without the prior written permission of the publisher,with the exception that the program listings
may be entered,stored,and executed in a computer system,but they may not be reproduced for
publication.
Printed in the United States of America
1 2 3 4 5 6 7 8 9 0
ISBN: 1-931836-70-1
Technical Editors:Doug Maxwell and Cherie Amon Cover Designer:Michael Kavish
Technical Reviewer:Doug Maxwell Page Layout and Art by:Shannon Tozier
Acquisitions Editor:Jonathan Babcock Copy Editor:Darlene Bordwell
Indexer:J.Edmund Rush
Distributed by Publishers Group West in the United States and Jaguar Book Group in Canada.
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page v
Acknowledgments
We would like to acknowledge the following people for their kindness and support
in making this book possible.
Karen Cross,Lance Tilford,Meaghan Cunningham,Kim Wylie,Harry Kirchner,
Kevin Votel,Kent Anderson,Frida Yara,Jon Mayes,John Mesjak,Peg O’Donnell,
Sandra Patterson,Betty Redmond,Roy Remer,Ron Shapiro,Patricia Kelly,Andrea
Tetrick,Jennifer Pascal,Doug Reil,David Dahl,Janis Carpenter,and Susan Fryer
of Publishers Group West for sharing their incredible marketing experience and
expertise.
Duncan Enright,AnnHelen Lindeholm,David Burton,Febea Marinetti,and Rosie
Moss of Elsevier Science for making certain that our vision remains worldwide in
scope.
David Buckland,Wendi Wong,Daniel Loh,Marie Chieng,Lucy Chong,Leslie Lim,
Audrey Gan,and Joseph Chan of Transquest Publishers for the enthusiasm with
which they receive our books.
Kwon Sung June at Acorn Publishing for his support.
Jackie Gross,Gayle Voycey,Alexia Penny,Anik Robitaille,Craig Siddall,Darlene
Morrow,Iolanda Miller,Jane Mackay,and Marie Skelly at Jackie Gross & Associates
for all their help and enthusiasm representing our product in Canada.
Lois Fraser,Connie McMenemy,Shannon Russell,and the rest of the great folks at
Jaguar Book Group for their help with distribution of Syngress books in Canada.
David Scott,Annette Scott,Delta Sams,Geoff Ebbs,Hedley Partis,and Tricia Herbert
of Woodslane for distributing our books throughout Australia,New Zealand,Papua
New Guinea,Fiji Tonga,Solomon Islands,and the Cook Islands.
Winston Lim of Global Publishing for his help and support with distribution of
Syngress books in the Philippines.
vv
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page vi
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page vii
Contributors
Kyle X. Hourihan (NSA) is the Senior Technical Trainer and Course
Developer for Nokia Internet Communications in Mountain View,CA.
He designs,writes and teaches Nokia Internet Division’s internal and
external training material.He conducts Train-the-Trainer sessions for
Nokia Authorized Training Partners as well as high-end training for
Nokia’s internal R&D and TACs (Telephone Assistance Centers).Kyle
has been working in network security since 1999,and previously worked
for 3Com as a Senior Instructor and Developer for their Carrier Systems
Division (Commworks).He started off his career working as a pro-
grammer,writing code for Cisco IOS,implementing minor routing
protocols,and performing software QA on their routers.Kyle earned a
bachelor’s of Science degree in Computer Science from the University
of Maryland,College Park.He is also a co-author of Freesoft.org
(www.freesoft.org),a comprehensive source of Internet engineering
information.Kyle resides in Palo Alto,CA.
Daniel Kligerman (Check Point CCSA,CCSE,Extreme Networks
GSE,LE) is a Consulting Analyst with TELUS.As a member of TELUS
Enterprise Solutions Inc.,he specializes in routing,switching,load bal-
ancing,and network security in an Internet hosting environment.Daniel
was a contributing author for Check Point NG Security Administration
(Syngress Publishing,ISBN:1-928994-74-1).A University of Toronto
graduate,Daniel holds an honors bachelor’s of Science degree in
Computer Science,Statistics,and English.Daniel currently resides in
Toronto,Canada,and would like to thank Robert,Anne,Lorne,and
Merita for their support.
Tony Bautts is a Senior Security Consultant with AsTech Consulting.
He currently provides security advice and architecture for clients in the
San Francisco Bay area.His specialties include wireless security and
deployment,intrusion detection systems,firewall design and integration,
post-intrusion forensics,bastion hosting,and secure infrastructure design.
vii
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page viii
Tony’s security experience has led him to work with Fortune 500 compa-
nies in the United States as well as two years of security consulting in
Japan.He is co-author of Hack Proofing Your Wirless Network (Syngress
Publishing,ISBN:1-928994-59-8) and Technical Reviewer for Configuring
IPv6 for Cisco IOS (Syngress Publishing,ISBN:1-928994-84-9).
Robert J. Shimonski (Sniffer SCP,Cisco CCDP,CCNP,Nortel
NNCSS,MCSE,MCP+I,Master CNE,CIP,CIBS,CWP,CIW,GSEC,
GCIH,Server+,Network+,Inet+,A+,eBiz+,TICSA,SPS) is the Lead
Network Engineer and Security Analyst for a leading manufacturer and
provider of linear motion products and engineering.One of Robert’s pri-
mary responsibilities is to use multiple network analysis tools on a daily
basis to monitor,baseline,and troubleshoot an enterprise network com-
prised of a plethora of protocols and media technologies.In Robert’s
many years of performing high and low level network design and analysis,
he has been able to utilize a methodology of troubleshooting and analysis
for not only large enterprises,but also for small to medium sized compa-
nies looking to optimize their WANs,LANs,and security infrastructure.
Robert has contributed to many articles,study guides,certification
preparation software,Web sites,and organizations worldwide,including
MCP Magazine,Techtarget.com,Brainbuzz.com,and SANS.Org.Robert’s
background includes positions as a Network Architect at Avis Rent A Car
and Cendant Information Technology.Robert holds a bachelor’s degree
from SUNY,NY,and is a part time Licensed Technical Instructor for
Computer Career Center in Garden City,NY teaching Windows-based
and networking technologies.Robert is also a contributing author for
Configuring & Troubleshooting Windows XP Professional (Syngress Publishing,
ISBN:1-928994-80-6) and BizTalk Server 2000 Developer’s Guide for
.NET (Syngress Publishing,ISBN:1-928994-40-7),and was the Technical
Editor and contributing author for Sniffer Pro Network Optimization and
Troubleshooting Handbook (Syngress Publishing,ISBN:1-931836-57-4).
Kevin Greene is a Senior Security Consultant leading technical risk
assessments,managing security projects,and implementing security solu-
tions for clients.Kevin has over six years experience in information secu-
rity.His focus is on network security,security architectures and perimeter
viii
234_nokia_FM_4.qxd 10/31/02 10:47 AM Page ix
security.Kevin’s focus is on Check Point Firewall-1 firewall software on
Nokia platforms,Cisco PIX,NetScreen firewalls,and Intrusion Detection
(overall threat management).Kevin conducts large-scale threat and vul-
nerability assessments using numerous vulnerability assessments and detec-
tion tools including commercial products and non-commercial (freeware)
products.Kevin holds a bachelor’s of Science in Management Information
Systems and a master’s of Science in Information Systems from the New
Jersey Institute of Technology.He is a Check Point Firewall-1 Certified
Systems Administrator and Systems Engineer (CCSA/CCSE).He has co-
authored CCNP CISCO Internetworking Troubleshooting 4.0 Study Guide
(Exam 640-440) and was a contributing author to the Cisco Newsletter in
2001.
ix