移动商务，安全的新挑战

李清华

中国区渠道经理, 企业解决方案事业部诺基亚(中国)投资有限公司, Nokia China

13901216940；oliver.li@nokia.com

诺基亚企业解决方案远景

采用任何终端设备采用任何终端设备 访问任何应用或数据源访问任何应用或数据源通过任何网络通过任何网络

为企业信息安全和移动商务

提供领先的解决方案

“Access Without Compromise”

Intellisync ClientIntellisync ClientPalmPalmPocket PCPocket PC Windows PCWindows PCJavaJavaSymbianSymbian SmartPhoneSmartPhone SyncMLSyncML BREWBREW

One Client GUI+ One Communications Gateway+ One Admin Console across all modules

Wireless Email: “Push” Email and PIM for Exchange, Domino, GroupWise, Internet Mail

Data Sync: Custom mobile data synchronization with Oracle, SQL Server, DB2, ODBC

File Sync: “Push” documents, unstructured data, Office docs, Web links

Device Management: Security, OTA distribution, configuration, asset management, backup/restore

XML Platform: Custom Server-to-Server PIM data synchronization

Intellisync Administration ConsoleIntellisync Administration Console

Intellisync Mobile GatewayIntellisync Mobile Gateway

WirelessWirelessEmailEmail

DeviceDeviceManagementManagement File SyncFile Sync PIM XMLPIM XML

SyncSyncData Data SyncSync

InstantInstantMessagingMessaging InfobotsInfobots

= One Infrastructure Choice

Instant Messaging: “PC-like” experience using a single client for both public and private IM

Infobots: Real-time access to both consumer and back-end enterprise applications

移动应用带来安全挑战移动应用带来安全挑战IntellisyncIntellisync Mobile SuiteMobile Suite

无线通讯网络

Local Area NetworkLocal Area Network

任何接入方式任何设备 任何类型数据

电邮/个人信息管理

企业应用数据CRM, SFA, FFA

企业文档

系统管理

Intranet 站点

企业数据信息

数据库

邮件服务器

文件服务器

企业接口界面

系统管理服务器802.11 Wireless LAN

Internet

即时通讯

即时通讯服务器)

设备：支持有线、无线的多平台设备

接入方式：网络独立性，GSM/GPRS/EDGE，CDMA 1X, CDMA 2000, WCDMA, TDS-CDMA，Wlan，Internet

诺基亚移动解决方案：诺基亚移动解决方案：IMSIMS

安全安全??

高性能 (Acceleration, Price/performance, Wireless QoS, Voice)多种功能集成 (Proactive, Scalable, Integrated Security)

灵活性 (HA, Session Persistence, Roaming端到端的管理 (easily scale investments)Access without compromising…

新需求

Wireless extends the Intranet outside ofthe Security CloudIntranet Cloud

Security CloudInternet Cloud

“Always On”

Nokia 安全解决方案策略

Security Dept./Administrator

Mobility Executives

Director/C-Level IT

安全成为无线应用的一部份

• 与更多的移动应用及设备提供商结盟

• 致力于保障移动应用的安全

传统安全方案演进

• 优化现有的硬件平台• 提供更好的集中管理• 更好的投资保护

Mobile Worker

MobileDevices Middleware

Comprehensive Management

Security & Mobile Security & Mobile ConnectivityConnectivity

Applications

Session Persistence

Device Sec.Secure Voice

Secure Connectivity

Roaming

End Point

集中管理

FirewallIPS

Security and Mobility Unification

Email, PIMServer

NokiaManagement

Center(Admin Interface)

DNSDirectory

Firewall

VPN (IP &/or SSL)

ID/P

Directory Services

Mobile Email

VoIP

Nokia Unified Threat Management Functions

• All-in-one secure mobility architecture• Ease of management,

integration, deployment• Consolidated management framework

Nokia IPSO支持多种安全解决方案

MobileIP

UTMmVPN

Secure mobile

messaging

IntellisyncMobile Suite

ID/P

Email Protection

VoIP w/ Mobility

Installed BaseInstalled Base(IPSO, Purpose-Built Hardware)

Nokia与Check Point强强联手• #1的中高端市场FW/VPN解决方案供应商

• 8 年的合作关系• 最成功的战略合作伙伴之一• 每年超过 $500 M的市场份额

• Nokia 和Check Point给财富100中的92家提供解决方案

• 紧密的合作• Nokia IPSO Flows/SecureXL• ADP 技术• Check Point VSX/GX• SIP/VoIP安全• IPv6• Flash系统

IPSO+

Networking

Next GenerationApplication

Support

Nokia IP SecurityPlatforms

Price

Wireless UTMWireless UTM

LargeEnterprise

DataCenter

XSP

IP560

IPSO4.0.1

Full VPN-1/FW

-1, IDP Support

IP710

Check Point SofaWare VPN/FW

IP350 IP355

IP380IP385

IP1260

IP60

Small to Mid

Enterprise

Remote Office

Branch Office

9 GbpsFirewall

SOHO

NokiaNokia IPIP安全平台系列安全平台系列

IP1220

IP2250/2255

IP260 IP 265

电信级千兆

企业级千兆

企业级百兆

分支接入级

IP40

IP390

6 GbpsFirewall

3 GbpsFirewall

• Full enterprise control – no NOC dependencies• NO inbound port from internet• Cluster support for redundancy and scalability• Full, end-to-end 3DES or128-bit AES security

ExchangeDomino

IntellisyncMobile Suite

Corp.Directory

LDAPNTLMActive Directory

HTTPAES encryptedIntellisync

Secure Gateway

Port 80Outbound-only

Port 80Port 3102 inbound

• Best option for larger deployments or for companies with a mobility needs beyond email that can’t be served by an operator hosted deployment and those that want a higher level off security

Behind-the-firewall

Software Deployment• OTA provision new device

w/ Authorized SW• Enforce Version & Patch

Control

Application Management• Turn off unauthorized

applications• Automatic Application

Configuration• Enforce Mandated

Application Configurations

Device Configuration• Automatic OTA device

config

Central Security• Device Password• Policy Enforcement with Device Kill• On Demand Device Kill

Backup & Archiving• Backup of all data, system settings,

applications, and application configurations

• Restore after device wipe or hard reset or new device

Asset Management• Automatic Asset discover/inventory

collection• Asset Tracking• Can Trigger actions after inventory

collection

设备管理设备管理

诺基亚企业解决方案远景

采用任何终端设备采用任何终端设备 访问任何应用或数据源访问任何应用或数据源通过任何网络通过任何网络

为企业信息安全和移动商务

提供领先的解决方案

“Access Without Compromise”

15 BABU / skoay Nov 2003 COMPANY CONFIDENTIAL

16 BABU / skoay Nov 2003 COMPANY CONFIDENTIAL

李清华

中国区渠道经理, 企业解决方案事业部诺基亚(中国)投资有限公司, Nokia China

13901216940；oliver.li@nokia.com