6
SonicWallSonicPointACeGettingStartedGuide
SonicWallwirelessfirewalling
Whenawireless deviceusesaSonicWallSonicPointACe
wirelessaccesspointtocommunicatewithawirelessdevice
onanothersubnetoronacompletelydifferentnetwork,traffic
betweenthedevicesisforcedtotraversetheSonicWall
networksecurityappliance.Thistraversalenablessecurity
servicestobeenforcedbySonicOS.
Standard
practiceforwirelessfirewalling(whereonewireless
clientiscommunicatingwithanother)bypassesmanyofthe
criticalsecurityservices.Thefollowingillustrationshowsthe
standardpracticeforwirelessfirewalling.
Standard wirelessfirewalling
Manysecurityproductsonthemarketsharethispotential
vulnerabilitywhentwousersconnectedbyacommonhubor
wireless
accesspointwishtoexchangedata.
SonicWalladdressesthissecurityshortcomingbymanaging
theSonicPointaccesspointsfromthenetworksecurity
appliance.Thisallowscompletecontrolofthewirelessspace,
includingzoneenforcementofsecurityservicesandcomplete
firewallingcapabilities.
Securewirelessfirewalling
WLAN Zone
Security Services
?
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
Other Security Appliance
WLAN Zone Security Services
SonicWall
appliance
SonicWall
SonicPoint
Content Filtering Service
Client Anti-Virus Enforcement
Gateway Anti-Virus
Gateway Anti-Spyware
Intrusion Prevention Service
oi