® www.protectstar.com Nokia 9500 Communicator ® ® INTRODUCTION: The Nokia 9500 Communicator provides fast and convenient Internet access via wireless LAN at data transfer rates of up to 11 MBit/s. You can work on presentations or text documents in comfort while you are on the move using the integrated office applications, while accessing data on your company network—such as databases— using wireless LAN or fast mobile telephone connectivity. The Nokia 9500 Communicator has 80 MB in internal memory and an the system known at the time of the testing procedure—operating MMC memory card slot for storing more data. system, applications, CGI abuses, useless services, backdoors, se- curity checks and so on. In addition, we used eEye Digital Security’s Source: www.nokia.de Common Hacker Attack Methods (CHAM®), an artificial intelligence SECURITY technology designed to unearth unknown and concealed weaknes- We have subjected the Nokia 9500 Communicator to a series of tests ses in the system by simulating the thought processes of a hacker. under both laboratory and real-life conditions. We can confirm that the device offers almost complete security protection. In carrying out In order to check wireless connectivity (WiFi, IEEE 802.1b), we used the security tests described below, we used a specially configured specifically developed wireless weak-point scanners to analyse WLAN router (ZyXEL ZyAIR G-2000) and several computer systems security techniques such as WEP (wired equivalent privacy) and operating under Windows XP and Linux that were connected WPA (WiFi protected access) and their encryption functions. We together to the Internet and intranet through the router. The test se- tested the security of the Bluetooth interface on the 9500 Commu- quence was as follows: In the first test phase, the Nokia 9500 Com- nicator using snarf attacks and the bluejacking method in order to municator was operated using factory settings with standardised check whether access to diary entries and contact data could be port scans to identify any TCP and UDP ports that may be open. All of made through an open Bluetooth interface. In summary, the Nokia the ports (0-63535) were scanned. In the second step, the device was 9500 Communicator successfully resisted all 7,770 different attack subjected to a SYN port scan (half open), which is also referred to as and security tests known at the time of testing during the days it was a stealth scan. Both test procedures were additionally carried out by subjected to our testing procedures. The Common Hacker Attack other computer systems in order to identify any deviations that may Methods failed to find any concealed or unknown security gaps in have occurred in the results. the device’s operating system (Symbian). The device hardly showed any loss in performance during the tests that lasted several hours. The port scans (TCP connect and SYN/half open) carried out with an open wireless LAN connection did not reveal any open ports or Our security experts noticed that the Nokia 9500 Communicator unnecessary services that may ordinarily lead to security problems. sends DHCP requests on the IPv6 protocol due to its dual IP Stack. Neither the automatic testing This increased security risk may lead to the Nokia 9500 Commu- sequences of the testing nicator representing a weak point in “unsecured” networks. The organisation’s own security operating system manufacturer, Symbian, and Nokia should remedy scanners nor the tests carried this issue ASAP. Currently, there are no possibilities of checking this out manually revealed any protocol. Apart from that, the lacking information and configuration weaknesses in security. possibilities prevent effective workarounds. Third-party protection The third and fourth testing software is only available for the IPv4, but not for the IPv6 protocol. procedures included intensive The Nokia 9500 Communicator does not include any protection from penetration testing lasting se- viruses, Trojan horses, or malware as standard. We would refer users veral hours. Several computer to the installation of third-party security solutions. systems were used in these tests, launching simultaneous USABILITY attacks against the Nokia The Nokia 9500 Communicator presents the user with a complete 9500 Communicator. During ready-to-use solution that hardly leaves anything to be desired. The these tests, the device was in package contains PC synchronisation software, the Nokia PC Suite, standby mode; that means that USB connector cables, headset, tabletop recharging station and it was not being actively used battery charger. The system is built around the Symbian OS7 series by anyone. In another test 80 operating system, and provides the user with a compact mobile variation, the device was in office weighing just two hundred and thirty grams. The Nokia 9500 active use by our test engi- Communicator comes in an elegant and businesslike design. The neers to simulate everyday keypad typical for mobile phones has a clear layout, and the good conditions. The penetration tactile qualities of the perfectly miniaturised standard keyboard on test consisted of all known the inside make it almost possible for the user to use it blindfolded. denial of service (DoS) attack The integrated office applications allow the user to work comfor- types as well as the exploi- tably and conveniently on text documents and presentations while tation of all weaknesses in on the move. The device supports the most important functions of Microsoft Word, Microsoft PowerPoint, and Microsoft Excel from ® their MS Office 97 versions onwards. Addresses and appointments hotspots in restaurants, cafes, train stations and airports. can be synchronised with the corresponding PC applications using Nokia PC Suite supplied on the CD-ROM included in the package, The Nokia VPN Client provides employees with the ideal equipment regardless of whether you are using Bluetooth, infrared, or USB 2.0. for mobile deployment. VPN technology allows secure e-mail SyncML support allows users to synchronise data using the mobile fetching and sending as well as company server access. However, phone network. our test personnel were disappointed that the WLAN interface only The Nokia 9500 supports the IEEE 802.11b standard with a maximum data transfer Communicator shows rate of 11 Mb/s instead of the new IEEE 802.11g standard, which a high degree of allows data transfer rates of up to 125 Mb/s. compatibility, which is especially useful to PERFORMANCE business users. The In our test sequences, the Nokia 9500 Communicator showed very device is compa- good performance results. There were no serious performance tible with Microsoft fluctuations or system crashes during the whole testing period. Outlook and Micro- The standard 1,300 mAh Li-ion battery included as standard with soft Outlook Express the device has a standby period of up to 300 hours with the WLAN address and appoint- function switched off. The maximum voice communication period ment services, as averages five hours according to the manufacturer. well as those of Lotus Notes/Organizer 5.0 and 6.0. PRICE/PERFORMANCE: The list price of Euro 829 (without a mobile phone communications The Nokia 9500 provider agreement) could make the Communicator very attractive to Communicator as a large LCD display with a fine resolution of 940 x thieves, making it all the more important to use the protection func- 200 pixels, or 65,536 colours. User data and software can be stored in tions built into the device. Entering a security code protects against the 80 MB internal memory. If more memory is needed, the Commu- unauthorised use and snooping into confidential business data.The nicator is also compatible with MMC memory cards. The integrated possibility of locking the system up by sending an SMS represents VGA camera—which also comes with a flash—not only takes photo- the next highest level of security. However, this should be used with graphs, but can also record video sequences. The picture quality is caution. A key falling into the wrong hands could have very tedious good considering the resolution, and longer video sequences are no consequences. In such cases, the only remaining option would be problem due to the possibility of extending the memory. to have the SIM card replaced by the mobile phone communications provider in order to continue using the device. However, the inte- Apart from that, the Nokia 9500 Communicator offers two further grated photo and video VGA camera as well as the flexible range of possibilities for mobile voice communication: The user can use the applications justify the price of the Communicator. The large range Communicator closed as a mobile telephone from the front side of of accessories supplied including the leather pouch, headset, and the device, or when opened up, as a hands-free telephone using the tabletop recharging station rounds off the package perfectly. integrated speaker. The user can also work on the Communicator during a phone call (multitas- king), and the microphone can be muted during conference calls. The Bluetooth interface works with the most common profiles such as BNEP, GAP, file transfer, LAP, PAN, and others. The device also offers a high level of convenience in hands-free phoning using the Bluetooth headset. Apart from GPRS and Edge, the user can access the Internet or company intranet using wireless LAN (WLAN) at any time. The user can call up HTML 4.01/XHTML websites or fetch and send e-mails together with attachments using the IMAP4, POP3 and SMTP protocols supported at WLAN ® VERDICT OPTIONAL SECURITY RECOMMENDATION The Nokia 9500 Communicator has passed the test series with a very F-Secure Mobile Anti-Virus for Nokia 9300/9500 Communicator positive result. This is an excellently equipped mobile telephone Series with an integrated organiser fit for everyday use. The good manuf- acturing quality, long battery life, and modern high-performance Our security experts recommend Mobile Anti-Virus for Nokia technology will especially appeal to business users.