Zone Alarm Pro 3 [Archive] - Antionline Forums - Maximum Security for a Connected World

Rewandythal

March 10th, 2002, 05:17 PM

Having just downloaded and installed Zone Alarm Pro 3, the latest and greatest update from ZoneLabs to this windows firewall, I'vecided to share my thoughts of it with everyone.

Whilst it has improved oover the previous versions as far as customisabiltiy and security are concerned (for example, it now offers cookie blocking, popup/banner ad blocking etc.) the user interface has grown out of all proportion, making the previously easy to use interface into something out of a technical guide for a nuclear fusion reactor!

Overall, it remains a good firewall, and has greater customisability in V3 over V3, but its interface has matured perhaps too much. It needed that bit more to it, to make it into a full featured firewall, but it's too big... it takes over the screen, and you still can't see all of the info it offers!

Rewandythal

March 10th, 2002, 05:17 PM

jehnx

March 10th, 2002, 05:45 PM

Thanks for the review. I'm beginning to go away from ZA; they're, it seems, trying to hit the "mainstream" now, or something.

jehnx

March 10th, 2002, 05:45 PM

Thanks for the review. I'm beginning to go away from ZA; they're, it seems, trying to hit the "mainstream" now, or something.

KorpDeath

March 18th, 2002, 04:09 AM

ZA still has issues with it's mutex engine. it can be tricked to do many things by virii and trojans, etc. etc.

I'd go with Sygate, NeoWatch, or Tiny. In that order....

ArmyOfOne

March 18th, 2002, 03:51 PM

Thanks for the review, I almost bought Zone Alarm Pro 3... so you see Tiny PC, NeoWatch or Sygate? I'll look into those.

VictorKaum

March 18th, 2002, 04:23 PM

I agree with KorpDeath

Sygate comes at 1st place when talking about Win application firewalls

Ron the don

March 18th, 2002, 04:48 PM

I agree with Rewandythal about the cookie blocking, popup/banner ad blocking etc. Thats a nice feature, but i'm having a slight problem with file uploads through web pages with ZA.

Sygate and tiny are spot on, except sygate doesnt react to everything when i run a few of them at once.

Vorlin

March 18th, 2002, 05:05 PM

I've got ZA Pro 3 purchased and with exception of a few minor things, I'd say the upgrade to 3 was worth the upgrade price (19.95). As a full purchase, I can see it being a little bit more of a decision but it does do a good job of handling things. The issue with the mutex might still be there but then again, if you allow things to be run automatically or just answer yes to any ActiveX script, then having a firewall is really a moot point. Sygate was good for the time I had it but I kept having problems with all of the logs. It seemed as if every day or so, the box would crash/reboot and when it comes up, there's a lost chain pointing to one of the three logs that Sygate writes to ALL the time or there's a lost cluster with the message complaining about the space not being enough for it. Maybe now that I've done a complete rebuild, it'll go away but ZA's never done that to me.

ZA Pro 3: pretty good firewall with slight issues with TrueVector but no base-line file problems.
Sygate: better than ZA Pro 3 but had repeated problems with crashing and file problems.

I'll turn off ZA and install Sygate tonight and see what happens for a few days. If I don't have a problem, I'll go back to Sygate.

Moral of the story: firewalls are only as good as the users administrating them. 10 minutes of education on any firewall and the programs that access the internet or local intranet is well worth it.

nurv

March 21st, 2002, 06:40 PM

Zone alarm in itself is a security hole. It opens a nice port to aim packets at. I tend to use blackice... not as a defence but as a logging system as that is alot of time all you can do. ZA's stack can be overrun with massive packets and thus made unusable. My advice is make friends with the IT guy at the local branch of your ISP. When ever I get hit with anything, it has to go through their FW first and he provides me with the logs I need to send to the appropriate ISPs. ZA also tends to make my internet games lag badly even if I give tem full internet rights.

kadeng

March 21st, 2002, 09:02 PM

You might wanna look a this

http://www.agnitum.com/products/outpost/compare.html

KorpDeath

March 21st, 2002, 09:06 PM

So, if you have featuritis then Outpost seems to be the firewall for you.... features, features, features. I'll stay with mine.

freeOn

March 21st, 2002, 09:15 PM

Sygate ****ing sucks! That's the most shibby firewall out there in my concern. ZA at least stops them. For all you people that think Sygate Rocks your fools. I would not use that as my main personal firewall, but maybe as a third firewall. NeoWatch and NeoTrace are good programs but NeoTrace is it's pride and joy, and I think everyone who runs it would agree why. I'm primarly concerned about protecting my data with firewalls and using data encryption. Also removing spyware and having at least some type of virus protection up.

KorpDeath

March 21st, 2002, 09:19 PM

And why, pray tell, does Sygate suck?

Conf1rm3d_K1ll

March 21st, 2002, 09:23 PM

Here we go again!

freeOn

March 21st, 2002, 09:29 PM

It doesn't show the correct information of an attack, The IP address are not properly labeld. The protection still leaves open ports. Also it can be killed from a simple batch or shell command.

P.S.
I'm not going to be here to battle with you. Just figure it out yourself

ac1dsp3ctrum

March 21st, 2002, 09:37 PM

Hmmm, Ill try ZA Pro3 for a while... I already have Sygate and Tiny installed....

Conf1rm3d_K1ll

March 21st, 2002, 09:52 PM

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=221470#post479378) by ac1dsp3ctrum
Hmmm, Ill try ZA Pro3 for a while... I already have Sygate and Tiny installed....

I honestly can't see the point in running more than one Windoze, software firewall. Your Firewall is either doing it's job or it isn't.....

Ac1sp3ctrum, perhaps you could explain to me the benefits of more than one software firewall? :confused:

KorpDeath

March 21st, 2002, 10:54 PM

There is no reason to run more than one.

BTW- FreeOn you're so wrong. If that was the case then it would be all over the net, and it ain't.

I've tested Sygate on multiple times and have found nothing of the kind. Sounds like you need to learn how to administer your firewalls correctly.

freeOn

March 21st, 2002, 11:41 PM

hey KorpDeath I'm correct and your wrong I think your the one who needs to learn how to configure a firewall and especially a firewall that doesn't work properly. Or maybe you do know how to configure a firewall in case I would suggest getting another one because Sygate Blows Goat Balls.

Ok I doubt it will help you my just showing you a command. I'll make a proggy that will turn Sycrape Firewall into mush. I'll see you when I get off of work sweet pea.

KorpDeath

March 21st, 2002, 11:46 PM

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=221470#post479376) by freeOn
It doesn't show the correct information of an attack, The IP address are not properly labeld. The protection still leaves open ports. Also it can be killed from a simple batch or shell command.

P.S.
I'm not going to be here to battle with you. Just figure it out yourself

Show me the batch or shell command you use... I have one for the old version of Sygate, but that doesn't work anymore.

P.S. Looks like you are doing a lil' battling?? No???

zigar

March 21st, 2002, 11:49 PM

<....side stepping the flames...> :D

after reading up on za thanks to KD (more than their press releases i mean..hehe)...i tossed it...

i tried sygate...and liked it...up until i installed the 2k service packs...then i could never get it to allow authentication on our domain...i'd have to log on to localmachine, set allow all then log off and log onto the domain...there was probably something i could have done...but couldn't figure it..so i'm using tiny now...and haven't had a problem...even after installing servpacks....

[WebCarnage]

March 22nd, 2002, 12:10 AM

Like Vorlin, I quite Sygate, but I have ZA and Tiny installed... just to let you folks know. Yet I think ZA has warped into some XP-ZoneAlarm, for it's to 'kiddish' and userfriendly...big buttons, weird GUI ...whoa. I'm not used to this.

Conf1rm3d_K1ll

March 22nd, 2002, 02:15 AM

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=221470#post479408) by KorpDeath
There is no reason to run more than one.

Thanks, KorpDeath. Just the answer I was looking for.

Although, I was already aware of that I justed wanted to see someone prove that using more than one is an advantage.....

KorpDeath

March 22nd, 2002, 05:39 AM

If you give me proof I'll accept defeat....graciously..

FeeOn- Love the avatar, too bad you don't know enough to keep the lil' dude animated.

freeOn

March 22nd, 2002, 05:48 AM

oh you big weenie.. Why do you got to be so serious. I'm glad you like my new avatar, It made me smile, yeah I could animate it but it wouldn't work right with the Eat Me on it so I got rid of it. I actually did make a proggy for you that does some unpleasant things to Sygate but I realized that it wouldn't be very nice of me to destroy your firewall. I'm not going to post it up because to many people would use it in the wrong way. I'll take the Avatar down tommorow because I know how much that has to annoy you.

KorpDeath

March 22nd, 2002, 06:14 AM

It doesn't bother me at all.

And you can just send me that lil' proggy you are talking about at anytime. I wouldn't want to think that I recommend something that isn't any good....

casper3699

March 22nd, 2002, 07:07 PM

I have ZA 3 on a few machines and I like how it is set up. The only problems i have had so far is how it is set up. When you want to get ZA 3 set it up on a test machine first to get used to the controls then install it on your good main computers once you know how to use it thourghly

KorpDeath

March 22nd, 2002, 07:10 PM

Still waiting FreeOn...... You can PM anytime to give that lil' proggy you keep talking about. I promise I won't share it with anybody........

kadeng

March 22nd, 2002, 07:18 PM

Outpost Firewall
Agnitum Outpost is the first personal firewall for Windows developed with Open Architecture. The Open Development Process proved its efficiency with the development of the Internet and with Linux. No company can be as fast, flexible and innovative at enhancing a closed product as thousands of developers from different countries all working on an open one.

Agnitum Outpost is the first personal firewall that supports plug-ins. Sample plug-ins are included to show how this revolutionary technology can easily be employed for such tasks as Intrusion Detection, Advertisement Blocking, Content Filtering, E-mail Guard and Privacy Control.

Agnitum Outpost is equipped with every feature a personal firewall should have. It is the most functional firewall in the world. Outpost supports all the latest security techniques and features such as: Full Stealth Mode, Anti-Leak, and MD5 Authentication.

Although Agnitum Outpost is setting new standards in the firewall market, it looks like any Office application! It needs no configuration before using-it starts protecting your system as soon as it's installed.

Compatibility is no problem. Agnitum Outpost brings you peace of mind in any environment no matter what:

Connection type you are using (dial-up, DSL, ISDN, Cable, T1 or Satellite).
MS Windows version (95,98, 98SE, ME, NT, 2000, XP).
Network (standalone PC, office network, home network, VPN or Microsoft Internet Connection Sharing).
Application you are using (every browser and e-mail client, Web or FTP server, ICQ, IRC, Online Gaming and every other application imaginable) .
There are two versions of Outpost: FREE and PRO. If you are not sure which version you need, please visit our online questionnaire to help you decide.

Note: We do not guarantee that Outpost Firewall will run on Microsoft ICS (Internet Connection Sharing) gateway (computer connecting two networks and transmitting packages from one network to another) running Windows2000 Service Pack 2 or Windows XP

Do i have Featuritus?

http://www.agnitum.com/products/outpost/

freeOn

March 22nd, 2002, 08:13 PM

KorpDeath you dumb jew I'll give you the proggy when I get back

Why are you waiting for me...you must me sexually attracted to me. That's fine alot of people find me hot. I'm not to kene on guys I only go for women.. Sorry KorpDeath I don't swing that way. Maybe other members could satisfy your needs.

How am I going to know that you actually ran the program and not just say you did? Then you could easily just say it didn't work freeOn can't program or shit. And all this just because you don't believe that Sygate can die. I mean there is no way for me to tell. I just don't wanna be mean to your machine

KorpDeath

March 22nd, 2002, 08:36 PM

I'll run the program, like I said, I wouldn't want to mislead anyone.

I give credit where credit is due.

Whit3Speic

March 22nd, 2002, 08:52 PM

My opinion is that ZA is an exellent (personal) firewall. If you want to go pro, we did Sonicwall, and have not had any problems.

Could someone specify more details of ZA's weakness. Someone mentione a port opening? How dedicated of a phreeek does it take to exploit this option..and why is it not easily corrected.

Whit3Speic

March 22nd, 2002, 08:57 PM

KorpDeath

March 22nd, 2002, 09:50 PM

Search the forum for that. We've had, probably, 15 conversations concerning the weaknesses of ZA. From the login problem on win98/2000 to the mutex engine weaknesses. I think it's all there.

kadeng

March 23rd, 2002, 01:09 AM

using 2 software firewalls?

Why?

Chances each software firewall has an unknown bug/exploit [disabled by a virus???]are not sf.
Using 2 dif. software firewalls min. the risk.[dif.arch.]

What s very good at this moment can be broken tomorrow[your second firewall is your backup!]

The3ntropy

March 23rd, 2002, 01:17 AM

IMHO,
I have used ZA 2.6 once in my life. Even though I only used it once, I easily saw that I had just made a big mistake, ranging from the easily exploitable security it offers, way too much time spent on UI, and I am not even going to begin to complain about trying to {it cannot be done} uninstalling ZA completely. I believe that the apple does not fall to far from the tree, if you know what I mean, ZA might change but I highly doubt that it will ever be a real contender with Tiny, Sygate, BlackICE, etc. The only support that I feel ZA has are people that are just beginning computer security who download it and SEE all that it does, it overwhelms those that do not understand it. Then they spread the word of how "good" it is. But anyway, I vow to never use ZA again. Just my Opinion. If you disagree please post why.

SKByor

March 23rd, 2002, 01:22 AM

i went to agnitum and downloaded everything. which is better when you have a megaproblem, outpost or jammer?
tnx,
skbyor

kadeng

March 23rd, 2002, 10:37 AM

SKByor i would use Outpost cos it s free!

ac1dsp3ctrum

March 23rd, 2002, 04:23 PM

Ok, I finished my test of ZoneAlarm 3 and it is, in my opinion, pure crap... It automatically allows programs that I do not want to access the internet access, the internet lockdown does not fully work, and the usability is bad... They should make a command line Zonelarm... It would be more useful :)

casper3699

March 25th, 2002, 03:59 AM

I found two new features that 2.6 doesn't have. Pop up stopper and it will not allow you to close it down with asking you first. If you try editing the startup of zonealarm it will pop up and ask you if you want to change the startup of it. So if you have a program that will try to disable it it will ask you first. Here is a pic of what it does.

Rewandythal

March 25th, 2002, 10:27 AM

Having just downloaded and installed Tiny Personal Firewall, I've found it a lot more advanced than ZAPro. ZAPro is a good backup firewall, so I shall leave both running for the time being. However, when I finish my network and have a hardware firewall between my network and the Internet, I shall only use one or the other of the 2, since having 2 personal firewalls seriously impacts the machine's performance (it's only a K6-2/450 with 128MB RAM), and if there's a hardware packet-filtering firewall in place as well I won't want it to be slowed down any more (I connect through a 56k dialup, so maximising speed and bandwidth is important!)

Over and above all of this, Tiny Personal Firewall is FREE!!!

Unleashed

March 25th, 2002, 03:03 PM

http://www.lockdowncorp.com

KorpDeath

March 25th, 2002, 07:26 PM

So it's been an entire weekend and have not heard from FreeOn. (wonder, wonder) Any chance of getting that lil' prog from you, FreeOn??

freeOn

March 25th, 2002, 07:30 PM

Nah Sorry KorpDeath your not going to get it. People have advised me not to give it to you. :withstupi

KorpDeath

March 25th, 2002, 07:43 PM

You are full of crap. Just admit it.

So don't give me the program. At least PM me with the details concerning how you wrote it and such so I can look into it.

freeOn

March 25th, 2002, 07:54 PM

I'm full of Crap your the one who thinks that a program can't mess with Sygate.
Why would I want to show you how... what's in it for me. I don't need to prove you wrong I already know I'm right.

KorpDeath

March 25th, 2002, 09:29 PM

What's in it for you? Assisting one of your fellow AO'ers.

And you're all alone in that knowledge, doesn't that make you feel special?

There is no harm in letting me know about a vulnerability in a program. You're making concerns up to avoid having to go through the humiliation of admitting you lied.

Next?

freeOn

March 25th, 2002, 10:42 PM

I'm not alone in this knowledge any programmer could make a program to mess with Sygate. Your just proving that your an idiot. And I'm not going to stop you keep rambling on.

KorpDeath

March 25th, 2002, 10:52 PM

So helping out an idiot isn't reason enough? If I'm so dumb then, please, educate me squire.....

freeOn

March 25th, 2002, 10:57 PM

Common Dumb Dumb keep rambling

KorpDeath

March 26th, 2002, 12:06 AM

I want so much to be like you FreeOn....I figure all I need is a labotomy and pair of tights.

So, I'm taking this insult throwing game you are playing as an admition that you don't know $hit. Thanks for veryfing.

freeOn

March 26th, 2002, 01:03 AM

Keep it going your starting to impress me.

VictorKaum

March 26th, 2002, 01:25 AM

Korpdeath and freeOn...

wtf?

Don't you 2 have better things to do then fight this thing out overhere. You 2: solve the probs using IRC or PM... or fight each other in Quake or RTCW.
I don't like to see 2 senior members flaming each other...
and btw: freeOn HAS made a prog that DOES disable Sygate
and if this thing continues I will write one to disable freeOn's prog ;)

*sigh

KorpDeath

March 26th, 2002, 03:34 AM

Now that I know I have an audience I guess I must reply.....

Then show it to me.....if you have a prog that (from the outside) can disable Sygate, then show it to me.
That's all.

Vorlin

April 4th, 2002, 05:02 PM

Guys, I click on this link because it's about ZA 3 and I end up reading a 1st grade name-calling match between two AO'ers I happen to like reading things from. Free0n, helping someone else with a program that might prove a vulnerability in a software firewall isn't going to harm anyone. I've seen countless people hoard knowledge because they fear someone else will make things better than them. While this may not be the case, I don't think telling KorpDeath how to show this vulnerability would do anything. Give him a stripped down version if need be. KorpDeath, if he doesn't want to show you, leave it at that and go find others who will answer your questions. I, for one, could probably help you out on that if I only knew what was trying to be accomplished. Also, never fully trust any program that you didn't write yourself. Your only problem is that you vaunt Sygate so much that people are tempted to write something that will show a hole just to prove vulnerabilities and whatnot.

Both of you, settle your differences in a PM or a private chat...but please don't take it here. I'd like to think we have a fairly good community of oldbies and people who know what they're doing. Let's not ruin that.

Hehe, if that doesn't work, get on RTCW or Global Ops! I'm Vorlin all over and we'll cap some asses!