dogopoly

This is being started because the topic came up in another thread.

The discussion is about using firewalls, and Zone Alarm was recommended.

I agree, as does much of the industry. Gibson Research (grc.com) is a big advocate of Zone Alarm because it is a "2-way" detector, unlike others like Black Ice that are one-way detectors.

Black Ice prevents attacks coming into your system, but Zone Alarm does this and also asks your permission for anything that is trying to leave your system (like a Browser.)

The 2-way detection creates more complexity because you will get Windows telling you that a lot of things are trying to access the Internet and it's not always clear what those things are (or if they are even from Windows or from other things like spyware.)

Anyone else want to comment?

Oh, to get Zone Alarm, the free version or the Pro version, go to www.zonelabs.com (or zonealarm.com which will take you there.)

The free version can be accessed from http://www.zonelabs.com/store/conten...ku_list_za.jsp

__________________
The dog days of summer are gone...
my leash is broken...I'm FREE! Let's party?
fleas really bug me!

panache

I personally like ZoneAlarm and have been using it for years. Originally started out using at work but then some of my co-workers couldn't get the hang of "permissions" to run different processes. So I decided to get a hardware firewall by Fortigate. That one is cool. Nightly it uploads the lastest anti-virus definitions.

With my new version Norton Utilities, I've tried to see how easy to is to hack into my computer and it's always come back clean - as in no one else can see my actual isp address.

NEVER, repeat, NEVER use the firewall that comes with Windows XP. I've not familiar with the specifics, I just know that a number of times I've had to disable it for the computer to work right.

I tried Black Ice but at that time I was already familiar with Zone Alarm so I stuck to that. I did shell out the few extra bucks to have Zone Alarm pro and of all the utility programs I have it's worth the most for the money.

My recommendation is if you do not have a firewall software installed in your computer, talk to your closest techiest friend and have them help install it for you.

dogopoly

What extra features did you get with Pro?

panache

Now you're going to make me do my homework!
Lol...I'll check and reply again.

panache

Comparison of the two products side by side:

http://www.zonelabs.com/store/conten...=41&submit.y=8

I'm a real security freak. Not that I can expect a hacker to NEVER get my personal info...and I've got nothing to hide-it's just the principal of the thing. It's MY computer, MY internet connection and my feeling is YOU can't share it or gleem anything off of it.

Hypnotist

Two-way protection makes more sense to me even though the outgoing request messages can be distracting and confusing. Remember that the more you see those warning messages, the more you "think" your software is protecting you. And if you believe you're protected, the more likely you are to buy upgrades or other products from that manufacturer. A lot of it's pure marketing, so not to worry. I Google the warning if I don't recognize the particular software asking for web access... simple. I've used ZA (free) for over a year. Never really considered buying the PRO version. I have all the other layers of free protection overlapping ZA and it works great for me. Using the following... all FREE:
Zone Alarm Firewall
AVG Anti-Virus
Ad-Aware SE
Spybot Search & Destroy
SpywareBlaster
SecretMaker
Hijack This
CWShredder

And one Purchased Utility:
Ace Utilities (free 30 day trial) Heck of a "clean and fresh" utility. Liked it so much I bought it, and it's great! Look at the CNET reviews on Ace if you're curious.

__________________
I have never met a man so ignorant that I couldn't learn something from him.
Galileo Galilei

mechmike0034

Try Easy Cleaner for a free "clean and fresh".

I also like Sygate Personal Firewall which is also free - I find it easier to network with (one click allows Network Neighborhood computers to share files) than ZA. It is also a 2-way firewall.

I use most all of the other programs you mentioned, but I am not familiar with Secret Maker.

__________________
"The price of progress is trouble." (C. F. "Boss" Kettering)
"50% of the American public has below-average intelligence. 70% of the American public now has regular access to the Internet. Do the math." (unknown)

Hypnotist

I think I had Easy Cleaner on my system once... Privacy Keeper too. Don't remember why I uninstalled. Probably because I only have a 2 gig hard drive. Not to worry though, I've got a Dell 8400 coming on the 5th. It has Lots of everything. Haven't tried Sygate Personal, but I've heard of it.

SecretMaker has some unique features... like a setting that hides your TRUE IP address by creating phantoms. Also has a cookie and pop-up blocker among other clean-up tools. It's useful, and better still, it's FREE!

TERRIBLETOM

It may be a little more work at first, but once you understand how it works and what you have going on in your own computer, it can get pretty simple.

panache

Wow,
Thanks guys for all the EXCELLENT input. There's a number of us who understand these things and there's a whole lot of people out there who don't even know that they don't know, lol... Anyway...it's really all a bunch of 1's and 0's.

Just this morning I was thinking of what I consider to be a most excellent utility, and I wholeheartedly CONFIRM that Spybot - Search and Destroy is a must have. I also like using Startup Cop. It used to be free, but if you look around you'll find someone's homepage with a link to a dl.

About Zone Alarm, since I was setting it up for use on all the computers at work I'd actually pay the fee for each version. It just so happened one of the pc's I installed it on the people were beyond clueless as to how to even turn on or off the computer, much less knowing how to allow program access in Zone Alarm. So, I used that license at home instead and have found it to be very stable. That's how I was able to get my boss to authorize the hardware Fortigate firewall so that all the pc's were protected.

Of course Virus protection is MANDATORY and I use Norton Anti-virus for that. What I love about the Fortigate firewall at work is that whenever there's anti-virus update their server automatically uploads it to our unit. When I inquired as to how much I could get something like that for my own home pc, it was like $500. Little too pricey for me. So for now I'm just using ZA.

Joeymad

I have never used Zone Alarm. I used to use McAfee Personal Firewall Plus but something messed up internally and I couldn't get it to update any more. I was using VirusScan also, so I had to get a new one of those.

Now, I am using Sygate Personal Firewall Pro 5.5 (and I really like it) with Nod32 as my virus scanner. I have to say, my computer runs a lot faster and Nod32 seems to be really good.

__________________

OC

I'm a fan of Zone Alarm myself. It still occasionally bites me in the ass (as with yesterday's fresh install) but that's my own fault for not remembering certain things, and only proves that it really is doing what I tell it to do.

__________________
But what is adulthood except a delayed end-run around our parents' better judgment?
-- Peter Egan

*cough*

panache

In my ZA, it authorizes Common Client User Session for Norton Utilities, but it also shows three active processes from Generic Host Process for Win32 Service. What process doesn't identify exactly what it's doing and yet bet enabled in the window at the very top showing active processes. ZA has always had that going on but I was just wondering if anyone knew what that term means.

Another must have utility I've been using is BHODemon. Fortigate recommended it to the admins of their firewall units, so I have it here at home too. http://www.definitivesolutions.com/bhodemon.htm You can see what active processes are going on and at least disable them. They've been developing each version rather quickly so often weekly they have a new update.

Have a Great Monday! Roflmao.....try your best anyway.

dogopoly

I have only one Generic Host process, but the name scares me. If it's under Microsoft's control, it's only a little scary, but if it's accessible by any process using your machine, then what's to say that a virus won't grab it and zombie your machine?

oh--I DID notice that I can't use Internet Explorer without enabling it.

panache

I know-like what is a "generic host process for a win32 service"?

It's:
1. Generic - could be anything
2. A host process - meaning, a program is running.
3. And Ok, so it's a 32 bit windows service (vs. what the old 8 and 16 bit processes?)

I sure would like to know what those "processes" are.

At some point you have to either always allow or always deny certain programs because it gets so annoying to have to approve everything. I've upgraded ZA probably 10 different versions, and sometimes I've tried their defaults and in the default it allows Microsoft Windows Explorer.
---
P.S. I did put out the bucks for a full version of Norton Systemworks. That's money well spent.

dogopoly

So, how important IS Zone Alarm?

I'm currently running a router with a built-in firewall and don't know that I need a software firewall, but it makes me feel safer...and once it's configured, it simply isn't that bad unless you install a lot of software that wants to talk to home-base.

mechmike0034

Precisely! I have a hardware firewall to keep stuff out from the outside. I run a software firewall (Sygate, as mentioned in an earlier post) so that in the event a rogue app slips by my defense system I get an alert if said app tries to access the 'net.

I set up and clean up a fair number of 0wned, spyware/adware/virus/trojan-infected boxes for people, and I put a software firewall on every one I fix.

navyones

The best way to find out just how important or how effective your firewall software is most likely is to run a test. You can run a pretty comprehensive test at www.grc.com. Use Sheilds Up to test your Firewall. This gives you a great opportunity to get an idea as to your firewall's effectiveness.

I would also recommend running a "Leak" check, while you are there. I use these programs anytime I set up a new network or place a comptuer on my existing network.

dogopoly

grc.com is where I first learned about ZoneAlarm. Gibson's got some great info on that website.

qwilliam

if you are using a vpn client, make sure you install zonealarm first BEFORE installing the vpn client. that's because zonealarm and vpn clients share a .dll file or something like that.

dogopoly

I had something like that for work and they guys suggested going to no-ip.com I don't recall all the details, but apparently it lets you bypass certain problems like this.

dogopoly

Just got notification of update #5.5.062.011

It claims to deliver:

This update delivers:

Protection From New Threats
Improved Performance


Think I'll wait for the next one.

DarkFury

Although I don't have any problems with Zone Alarm (and it is recommended software), I've never had any problems with programs "operating properly" with the Windows Firewall enabled...

Sounds to me like you installed Service Pack 2 (with the firewall) after you already had some spyware, virus, or trojan on your PC which prevented it from installing correctly.

For a BASIC firewall... it is ok. Zone Alarm... is still better though.

__________________


DarkFury's Pimptopia - Don't Hate the Playa, Hate the Game!
Home of the Original OG Pimp (accept NO imitations)