SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: SIer formerly known as Joe B. who wrote (35760)8/16/2003 3:15:54 PM
From: mr.mark  Respond to of 110652
 
"Good points. I've never heard or read about a real world instance of Zone Alarm failing."

previous versions of zonealarm were failing when trojans got through (no firewall is designed to *stop* a trojan, but some will alert when one is trying to phone mommy) and attacked it.

but zonelabs addressed that and implemented a condition that i hear referred to as failing in the off position #reply-18537776 .

gottfried and i entered into a discussion on this topic not too long ago #reply-19070350

and he posted zonelabs' note on "firewall hardening"...

"Firewall hardening is a failsafe security measure built in to our products. If a hacker or malware attempts to directly assault ZoneAlarm, Plus, or Pro, the software prevents Internet access for any applications not already running." #reply-19070419

the most recent version of zonealarm free is 3.7.202. i recommend that everyone stay nice and current with these firewall upgrades, as they are always released to address some sort of vulnerability.

it's easy to become complacent when a given program is running well and not causing conflicts, and the if it ain't broke don't fix it folks are singing their merry tune in the background.

but i always figure that there is more to broke than meets the eye, and all it takes to stay out of trouble is a good source of current security knowledge and the ability to objectively weigh the consequences of doing nothing.

jmo and hth



To: SIer formerly known as Joe B. who wrote (35760)8/20/2003 8:27:51 PM
From: mr.mark  Respond to of 110652
 
this is what i was looking for....

"Interestingly enough ZAP does recommend that the user set Program Control to High after 2 days (or so) of normal Internet use. This enables full program and component control which is the key to monitoring and managing program interaction. ZAP can't control this until each program and its components have been loaded into its program database.

But, if ZAP came with that feature set at installation time, the user would literally have to respond to hundreds of component level access requests while ZAP is in this learning mode.

This Advanced Program Control was actually added to ZAP specifically to address the tooleaky exploit method (ie. one program calling another in order to access the network), which in this test ZAP is shown failing because of this initial setting."

wilderssecurity.com