SonicWall is introducing its own Wi-Fi access point that can make it easier for customers to deploy and manage secure wireless networks.

The company's SonicPoint access device sits between wireless laptops and SonicWall Pro firewall/gateway appliances and can secure transmissions using two security protocols: Wi-Fi Protected Access (WPA) or Wired Equivalent Privacy (WEP). Alternatively, customers could add IPSec VPN tunneling from laptops to the firewall/gateway, and SonicWall's Global Management System software could manage all three security options. The firewall/gateway appliances also block unauthorized users from accessing the corporate network.

The new gear will make it simpler to deploy wireless coverage in buildings with more than two access points because the access points can all be connected to the same gateway, says Joe Sykora, an integrator with Innerspace, which sells SonicWall gear to businesses. Because a VPN tunnel has been set up through the access point, a roaming user can move from one access point to another and the VPN appliance will keep alive the VPN tunnel session, he says. Users don't have to log on again when they move.

Running VPNs to protect wireless networks can have an advantage over WEP and WPA, says Jason Wright, an analyst with Forrester Research. IPSec is a stable standard, whereas standards surrounding the authentication for the others still are evolving, he says.

He says that support for multiple security zones in the firewall appliances can be used to create internal security between different groups of wireless users within a corporation. So a firewall rule could limit access of the mobile members of the marketing department so they cannot reach human resources servers, for example.

SonicWall competes most directly against WatchGuard Technologies for low-cost VPN appliances for small and midsize businesses, but WatchGuard has no competing wireless access point. Each company has an appliance for home offices that integrates a wireless access point with a firewall/VPN in one box. Vendors of gear for large corporations such as Cisco offer similar equipment at higher prices.

SonicPoint supports Power over Ethernet (PoE), so there are no power cables for the devices. For businesses that don't have PoE switches, SonicWall also is introducing a power injector that adds power to the line. SonicWall also sells a wireless card that supports 802.11a, b and g.