|
|
Nokia IPSO
From Wikipedia, the free encyclopediaJump to: navigation, search
Check Point IPSO is the operating system for the 'Check Point firewall' appliance and other security devices, and was originally a proprietary fork of FreeBSD, but with numerous hardening features applied.[1].
The IP in IPSO refers to Ipsilon Networks, a company specialising in IP switching acquired by Nokia in 1997[2].
In 2009, Check Point acquired Nokia security appliance business including IPSO from Nokia[3].
Contents [hide]
1 IPSO Variations
1.1 IPSO SB Features
1.2 IPSO SB Versions
2 References
3 External links
[edit] IPSO Variations
Ipsilon's original FreeBSD-derived IPSO is now known (mostly internally at Nokia) as IPSO SB, distinguishing it from two Linux-based versions created more recently.
IPSO SX was Nokia's first release of a Linux-based IPSO, and was deployed in 2002 on the now-defunct Message Protector [4], and briefly thereafter on a short-lived appliance version of the "Nokia Access Mobilizer", acquired from Eizel. It had a partitioning scheme somewhat reminiscent of IPSO SB, a LILO configuration and boot manager also somewhat inspired by IPSO SB, and a software package installer that made RPM packaging look more familiar to a Nokia IPSO administrator. It did not, however, include a full configuration database or Voyager web interface, the two things that normally define IPSO.
IPSO LX is Nokia's current Linux-based IPSO, and is used on Nokia appliances sold with Sourcefire 3D. It includes a full Voyager and database implementation—in fact, the Voyager look and feel in IPSO SB 4.0 onwards was based on that implemented for IPSO LX.
[edit] IPSO SB Features
IPSO SB notable features or firsts include:
Effective firewall load-balancing (in conjunction with Check Point sychronization), derived from Network Alchemy clustering technology, predating and still independently developed from Check Points ClusterXL.
The first commercial IPv6 router out of beta-testing (ahead of Cisco and Juniper Networks)
Firewall Flows for putting Check Point security rule implementation into the dedicated network processor circuitry on-the-fly (though this is now largely evolved into Check Point's SecureXL)
[edit] IPSO SB Versions
IPSO SB was originally derived by Ipsilon Networks from FreeBSD 2.1-STABLE and cross-compiled on FreeBSD 2.2.6-RELEASE and 3.5-RELEASE platforms. Its major components are:
A configuration database held in memory by the "xpand" daemon, that creates legacy UNIX configuration in /etc on-the-fly.
A partitioning scheme which places a mini-IPSO in a separate boot manager partition for recovery
A partition-slicing scheme which segregates read-only and read-write content
A software packaging scheme which requires all packages to remain in a single location under /opt
A web interface, Voyager, which was closely integrated with the configuration database. (It has now diverged somewhat.)
IPSO versions up to 2.x were sold by Ipsilon Networks as part of the ATM tag-switching solutions that they originally pioneered. IPSO 3.0 onwards were designed to host Check Point FireWall-1 and other third party packages.
IPSO 3.0 to 3.9 spanned from 1999 to 2005 and, while adding many features and significant performance and hardware refinements, were recognizably the same to the administrator.
IPSO 4.0 was not designed as a major update and was internally numbered as IPSO 3.10. However, Check Point software was unable to process a two-digit dot version, and it also included a refresh of the Voyager HTML interface. Up to that point, JavaScript and frames had been avoided in order to facilitate the use of Lynx as a command line interface. These together resulted in it being renumbered as 4.0. IPSO 4.1 and IPSO 4.2 are incremental releases. IPSO 4.2 will gain source-based routing as its last scheduled new feature. All new development will continue on IPSO 6.x.
IPSO 5.0 build 056 was released in 2009 for VSX R65 support on IP Appliance.
IPSO 6.0 was announced by Nokia in relation to the IP2450 and IP690 hardware. It was based on FreeBSD 6.x. Its primary advantage over IPSO 4.x are improved memory management, performance, scheduling, threading, POSIX-compliance, and other operating system features. IPSO 6.0.7 was released in 2009 for IP690 and IP2450 with CoreXL (multi-core) support. IPSO 6.1 contains other enhancements from FreeBSD 6.x but without CoreXL support. Because of the step change, Nokia advsertised that IPSO 4.2, 6.07 and 6.1 will run alongside each other for a period of time. When Check Point acquired Nokia IP appliance business, 6.07 and 6.1 development branches were merged and combined to 6.2.
IPSO 7.0 is actually IPSO LX. It is likely that Nokia will now keep the major version numbers fixed and distinguish Linux from FreeBSD just by the version numbering.
After acquiring Nokia IP appliance business, Check Point announced project Gaia to combine both IPSO and Secure Platform. First release is expected in 2011.[1] |
|
IP卡
狗仔卡
发表于 2010-12-13 13:36:18
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
显身卡
楼主