- Is the Cisco MARS mission going to abort?
- First iPhone worm spreads Rick Astley wallpaper
- 10 stunning 3D buildings made with Google SketchUp
- Open source software ready for big business
- Four reasons to buy (and one reason to avoid) the Droid
Joanie Wexler looks at how enterprises can take advantage of wireless LANs and WANs.
Interesting synergies are emerging between wireless LAN systems makers and security companies. We should soon be seeing the fruits of one partnership announced earlier this year between Meru Networks and iPolicy, which makes a new class of product called "intrusion prevention firewalls," for example.
As you likely know, Meru markets thin WLAN access points and associated WLAN management controllers, with a heavy emphasis on voice capabilities. For its part, start-up iPolicy recently hit the sweet spot of Gartner's coveted magic quadrant as both "leader and visionary" in the network security technology category. The company combines multiple types of network security capabilities into a firewall that serves as a network-overlay device that operates at Layers 3-7, meaning that it can conduct deep-packet inspection.
In March, Meru and iPolicy said that iPolicy's technology would be integrated into the Meru controller starting in the second half of 2004. By my calendar, that is coming up quickly.
Usually, like traditional firewalls, iPolicy gear sits at the WAN edge of an enterprise network - what used to be the only "door" into the network. However, WLANs create yet another network door that must be safeguarded as carefully as the WAN edge.
IPolicy's IP Enforcer firewalls integrate multiple security applications in such a way that a device can inspect a given packet just once against multiple rules. The company calls this capability "Single Pass Inspection."
In other words, if the firewall were checking a packet against policies for access control, URL filtering, intrusion prevention and compliance to a certain antivirus software version, it would have to check the packet just once to determine conformance to all those variables. This prevents the multifunction device from taking performance hits as it attempts to do more and more things.
Watch for a trend in other similar allegiances between WLAN systems companies and more traditional network security and core network service-type companies on the integration front this year.
Joanie Wexler is an independent networking technology writer/editor in Silicon Valley.
Comment