14
S
ONIC
WALL S
ONIC
P
OINT
A
DMINISTRATOR
’
S
G
UIDE
:
5
Click on this checkbox to deselect the option. By deselecting Only allow traffic generated by a
SonicPoint, you are allowing for all the interfaces in this wireless zone to accept traffic that
originates either from a SonicPoint or other device.
6
The SonicPoint device can now receive traffic from a non-WLAN device.
Wireless Firewalling
Some high-end wireless Access Points provide the ability to control wireless Inter-client
Communications, meaning they can allow or disallow wireless clients connected to that particular
Access Point from communicating with each other. These Access Points, however, generally cannot
directly control a wireless client’s communication with a remote host, such as a wired client, an
Internet host, or even a wireless client associated with another Access Point.
The Inter-client communication control feature on the SonicWALL TZ Series 170 Wireless took this
control a step further by consolidating the Access Point, Secure Wireless Gateway and the Firewall
into a single unit--providing full firewall Access Rule applicability to all wireless traffic on that individual
unit.
Wireless Firewalling within the Secure Wireless Solutions/Architecture provides this same level of
granular control, only in a highly scalable, distributed fashion. It is a function of a design innovation
wherein all traffic that enters the wireless interfaces on a SonicPoint is forwarded back to the
managing SonicWALL security appliance where it can be processed by firewall Access Rules, NAT
Policies, and Security Services. While in Managed Mode, Wireless Firewalling allows no direct
communication between an affected wireless client and any other host, whether connected to the
same or a different SonicPoint, or whether wireless or wired; all traffic must traverse the firewall. This
can be used, for example, for the following application:
•
To control access for all wireless inter-client communications.
•
To control access for certain wireless client communications with other wireless clients.
•
To control access for wireless client communications with wired hosts, or Internet hosts.
•
To control access using Service Objects.
