Zone Labs is introducing a new version of its security software that increases the types of 802.1x wireless devices that it supports to include handhelds and phones, letting customers ensure specified security measures are in place before those devices are allowed wireless network access.

Zone’s Integrity 5.0 fully integrates with Check Point VPN gateways, an important move because Check Point is in the process of buying Zone. Rather then checking simply whether the remote machine had a personal firewall running, Integrity 5.0 can now check whether it has anti-virus software running at the right version, has appropriate Microsoft patches and other checks users define. Previously Integrity had this level of integration with Cisco and Nortel VPN gear as well as 802.1x wireless equipment.

Integrity's ability to check for any program on a remote device is key to Epson America, a marketing division of the printer manufacturer, which has set up kiosks in malls where shoppers can punch in the menu for a local restaurant, pick a meal and get back a suggestion for wine to go with it. With Integrity, the company can check whether the kiosk software is running and update policies to the Integrity firewall, says Sam Elkholy, Epson's manager of professional services. Before installing the software, the machines had been attacked by hackers, he says, and plagued by pop-up ads.

In addition, the software can now check whether the right version of Computer Associates and Sophos anti-virus software is running on the remote computer. Previously, Integrity could check for software made by McAfee, Symantec and Trend Micro.  Integrity checks for the current version of the software and can either issue users a warning that an update is needed or direct users to a site where they can download it.

With the new software version customers can manually add checks for anti-virus software made by other vendors, as long as the customers know what files to look for.

Customers can also grant limited access to corporate networks for machines whose security is found lacking. Before, they could be referred only to dedicated servers quarantined from the rest of the network. Now customers can grant restricted access to network-based servers that contain the necessary updates to bring the remote machines into compliance.