MS Shafts ZoneAlarm Users

[Fraz]

This got me just now. Was about 40 minutes before I got around to turning off my firewall. Rather annoyingly a mate had arrived with a laptop, and I thought it was his connection to my router that was screwing my main PC's connections.

Grrrr.

[timread]

We have a group policy on our network that turns off the Windows firewall on laptops when they're connected directly to our network, and enables it when not

Good grief - no offense, but why on earth would you need to do that? The minute someone brings in a compromised laptop or rogue device and connects it to your network, you're in serious trouble.

You should just use a group policy to define a few appropriate exclusions on an application & port basis, if you really need to allow a few known good applications past the Windows Firewall. Examine the pfirewall.log to see what's getting blocked that you want to allow through.

We're not far away from Network Access Protection. Then any network device isn't even allowed onto the LAN before it passes defined security checks.

[explicitlyrics]

Got me too. However with me working stupid hours at the moment I only just sorted it out this evening. Left me without internet for almost 2 days. Just didnt dream of suspecting Zone Alarm and a system restore didnt fix it. Very strange, wont be long before everybody calls me to ask why there is no internet....

[Agent]

ZoneAlarm used to be terrible for causing problems with some software and not going away when you shut it down or even un-installed it.

It really wouldn't surprise me if MS fixed a hole that caused ZoneAlarm alarm to break because it was doing something it shouldn't.

The number of PC's I've seen have issues with Zone Alarm is shocking. It really is on my S-list
Suppose its one of those great if it works, but hell if it don't software.

[Howard]

Good grief - no offense, but why on earth would you need to do that? The minute someone brings in a compromised laptop or rogue device and connects it to your network, you're in serious trouble.

The minute someone connects a rogue device to our network, the switches won't let them connect, and we get notified of which switches/ports etc

There's a Guest LAN/net connection for people to use, they can plug all their compromised laptops into that and let them swap viruses between each other without affecting us

Our security could probably be improved in this respect a little but it's certainly not the worst out there

[Marcos]

its just struck me on win2000 at work

time to go back to sygate firewall....unless theres a cure?

[Marcos]

oh this is brilliant!

switched back to Sygate personal firewall, and now Yahoo mail wont work again, now i remembered why i switched to ZoneAlarm

great

[Splash]

its just struck me on win2000 at work

time to go back to sygate firewall....unless theres a cure?

http://download.zonealarm.com/bin/fr...cessIssue.html

Essentially don't run the patch (and reduce your internet security), reduce your security settings in ZA (and reduce your internet security), update your copy of ZoneAlarm and hope that something like this never happens again (*ahem*) or spend some money on a decent software firewall.

[Marcos]

thanks, will try that

[neonplanet40]

I still use Sygate on all my systems

[2Cold Scorpio]

Since I lost the argument with the boss about implementing firewalls for clients and servers, I have had to use a layer 8 firewall on our systems.

Here it is

Mwahahahaha! Now that's what I call security.