Nokia Mobile VPN

for Mobile Devices

Today’s business challenges require users to stay connected authentication (Nokia E66/Nokia E71 PR2
feature). Intranet access can be smooth and
to their offices while traveling. Accessing intranet web pages, silent as there are no username/password
queries.
internal Wikis, blogs or team-room applications is often a
business requirement. Nokia Mobile VPN Client
Nokia Mobile VPN Client is an IPSec
Virtual Private Network (VPN) application
developed by Nokia for Symbian OS-based
mobile devices. An IPSec VPN allows a user
to use the mobile network and the Internet
Using VPN for Mobile Devices Nokia Mobile VPN Client enables employees to safely connect from the mobile device to
to connect to the business network virtually the company network. Once authentication
Nokia Mobile VPN Client provides the
anytime, anywhere. to the company VPN is successful, data
necessary access using standards-based
Internet Protocol Security (IPSec) VPN Central management of security policies and travels encrypted to and from the mobile
technology. This allows users to click on a updates over the air provides uninterrupted device and is received just as the sender
link to an intranet web page embedded in service to mobile workers. Management is sent it. IPSec also protects against electronic
an email that is received by the always-on based on the Open Mobile Alliance Device data theft because attackers are unable to
email solution—Mail for Exchange for Nokia Management (OMA DM) protocol, and any capture data when it is sent or received and
devices. Nokia Mobile VPN Client provides device management server that follows then retransmit it later.
intranet access transparently for the user, OMA DM specification can be used to
authenticating the session using digital install the client, to deploy VPN policies Deploying and Managing
certificates or by adhering to username/ and X509v3 certificates. Nokia Mobile VPN Client
password authentication infrastructures
For small-scale deployments, Nokia Mobile
with RSA SecurID token or Active Directory/ Intranet Browsing VPN Client can be set up through the user
LDAP-based schemes.
Nokia E66 and Nokia E71 devices come interface on the device. A complimentary
Nokia Mobile VPN Client is an interoperable equipped with an intranet application that policy tool for Nokia Mobile VPN Client can
and manageable IPSec VPN client that makes intranet web browsing easier than be used to create VPN policy and to attach
enables users to access compatible business ever before. This application creates VPN optional certificates into a VPN policy
intranet and extranet services from mobile access points automatically when needed, bundle. The created policy bundle can be
devices that are optimized for business establishes a Nokia Mobile VPN connection delivered to a device using Nokia PC Suite
use. It offers protected access to business and launches a web browser to a pre- or via a memory card, a USB drive, or an
applications, and provides a single point defined intranet web page. The intranet Infrared or Bluetooth connection. Once
of security management for an increasing application also supports silent web, single the policy is delivered to the device, VPN
number of mobile employees and devices. sign-on in environments that support NTLM implementation is just a click away.

End-to-End Connectivity, Security and Management

Intranet Services Email

Firewall/VPN
IPSec VPN Connection
Internet

VoIP Services Applications

Device Management
Nokia VPN Client

Nokia Business Mobility Solutions Intrustion Prevention

A device management server that follows • Integration to Internet access point User Authentication
OMA Device Management specification selection using VPN access points
• X.509v3 digital certificates for authentication
can be used to install, configure, and • Support for IPSec over Network Address
• CRACK for legacy authentication
continuously manage not only the VPN Translation (NAT)
• Username/Password (RADIUS)
client but application settings such as email • Support for split-tunneling
• Token cards
and the web browser (e.g., to add links to • Support for internal addressing and DNS
• IKE preshared secret
intranet pages for the company). Device • Support for OMA DM for automatic policy
• GSM Subscriber Identity Modules (SIMs)
management can also be used to define updates
via EAP-SIM
WLAN/Wi-Fi access points to provide a • Support for automatic certificate enrollment
• Third Generation authentication and key
full range of intranet access options to the via OMA DM
agreement via EAP-AKA (requires USIM
end-user. Using OMA Device Management • Support for manual configuration using the
application on the smart card)
interface to do over-the-air deployment device’s user interface (UI)
offers superior consumer experience for • Supported VPN gateways:
end-users—seamlessly, reliably, and without - Nokia IP VPN Gateway Public Key Algorithms
user intervention. - Check Point VPN-1 NGX • Diffie-Hellman 768-1536 bits
- Cisco ASA and VPN Concentrator (Groups 1, 2, and 5)
Key Features - Alcatel-Lucent VPN Gateways
Key Management
The key features of Nokia Mobile VPN Client
Encryption Algorithms • IKE (ISAKMP/Oakley) – main, aggressive
include the following:
• PKCS#8 for private key format, PKCS#5 v2
• DES (56 bits), 3DES (168 bits), AES (128,
• Empowers a mobile worker to reliably for private key encryption
192, 256 bits)
access network services from email and • PKCS#12 for importing private key
• SHA1, MD5 hash algorithms for encryption
intranet browsing, to corporate VoIP and certificate
services • Perfect Forward Secrecy (PFS) for
• Supports S60 3rd Edition Feature Pack IPSec associations
1 (and newer) on compatible devices,
Learn more about Nokia Mobile VPN Client at
including Nokia E90 Communicator,
www.nokia.com/mobilevpn.
Nokia E51, Nokia E66, Nokia E71, and more

Work together. Smarter.

Nokia Inc. 102 Corporate Park Drive, White Plains, NY 10604 USA
Americas Tel: 1 877 997 9199 • Email: usa@nokiaforbusiness.com
Asia Pacific Tel: +603 9145 1032 • Email: asia@nokiaforbusiness.com
Europe France +33 170 708 166 • UK +44 161 601 8908 • Email: europe@nokiaforbusiness.com
Middle East and Africa Dubai +971 4 3697600 • Email: mea@nokiaforbusiness.com

www.nokiaforbusiness.com

NI3 105 040

© 2008 Nokia. All rights reserved. Nokia, Nokia Connecting People, Eseries, E51, E66, E71, and E90 are trademarks or registered trademarks of Nokia Corporation. Microsoft and Mail
for Exchange are trademarks of the Microsoft group of companies. Check Point, the Check Point logo, VPN-1, and FireWall-1 are trademarks, service marks, or registered trademarks of
Check Point Software Technologies Ltd. Other product and company names mentioned herein may be trademarks or trade names of their respective owners. THIS DOCUMENT IS PROVIDED
FOR INFORMATIONAL PURPOSES AND IS NOT WARRANTED TO BE ERROR-FREE, NOR IS IT SUBJECT TO ANY OTHER WARRANTIES OR CONDITIONS, WHETHER EXPRESSED ORALLY OR IMPLIED IN
LAW, INCLUDING IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Nokia and Microsoft specifically disclaim any liability with respect
to this document, and no contractual obligations are formed either directly or indirectly by this document. Under no circumstances shall Nokia or Microsoft be responsible for any direct,
special, incidental, consequential, or indirect damages howsoever caused. Nokia operates a policy of ongoing development and may make changes to products and their specifications
without prior notice.