Re: ZA problems (surprise)

From: Ralf G (ralfgski@yahoo.com)
Date: 05/15/02


From: "Ralf G" <ralfgski@yahoo.com>
Date: Wed, 15 May 2002 10:53:10 -0400

Hmmm, meant to imply it's a known issue if you are running NAT...
>From ZoneLabs:

 " ZoneAlarm and ZoneAlarm Pro are compatible with NAT. If you set the
Internet zone security level to "High," the computer running ICS will be
protected by the firewall. However, Internet access for the other computers
(that access the Internet through the ICS machine), will be blocked. As a
workaround, you can set the security level on the ICS machine (for the
Internet Zone) to "Medium."

Cheers,

"Ralf G" <ralfgski@yahoo.com> wrote in message
news:pmuE8.12735$w04.1721901@news20.bellglobal.com...
> I had these symptoms (not retaining program settings) only when the ZA or
> ZAP installs were corrupted (ie. installing ZAP over ZA or some other
> reason). On a clean install ZAP 2.6x hasn't given any problems (WinME
> however). Don't opt to keep your existing settings when re-installing.
>
> Your second problem is something I only see on a client computer when
using
> ICS (NAT). Hmmm, I recall having to open a specific port in Browsegate 3's
> (also NAT) firewall to overcome this same problem (before that program's
> serial number changed and I couldn't use it anymore <Grrrr!> . Using its
> internal proxy also solved the issue.
>
> Otherwise my ICS server runs fine on its own with ZAP 2.6x set for high
> internet security.
>
> Here's an idea; I just now enabled my AnalogX proxy server (very simple
and
> small) and my ICS client is now able to browse the internet with ZAP
> security still set at High (stealthed). Could be worth a try for your
> situation too.
>
>
> "meat popsicle" <mp@catscape.com> wrote in message
> news:abqvik$k9sco$1@ID-141843.news.dfncis.de...
> > I am using ZA 2.6x on my gateway and everything works well for the most
> > part. The only two annoyances I have are when confirmation boxes pop up
> for
> > software that wants permission to access the net. I click the "remember"
> > box, but every time I reboot ZA pops the confirmation boxes all over
again
> > for the same programs. How do I get ZA to remember these things?
> >
> > Another thing - this is probably something really simple, but I haven't
> > found the answer yet - when I move the slider from medium to high
security
> > (internet zone) all browser and email traffic is blocked. Isn't there a
> way
> > to have stealth ports and still have browser/email access?
> >
> > TIA,
> >
> > mp
> >
> >
>
>



Relevant Pages

  • Re: IP address assignment for VPN computers
    ... To connect a windows 2000/2003 network to the Internet, you may use one of two methods: ICS and NAT. ... ICS is designed to provide a single step of configuration on the computer running Windows 2000/2003 to provide a translated connection to Internet for all of the hosts on the network. ...
    (microsoft.public.windows.server.networking)
  • Re: Does ICS or Firewall have a NAT
    ... >> Yes, ICS uses NAT. ... that a NAT creates a mapping of an intranet ... > computers request out to the Internet. ... ICS can do what you want. ...
    (microsoft.public.windowsxp.network_web)
  • Re: How to I change ICS default IP address 192.168.0.1?
    ... ISP is only giving one address even though it is a Private address. ... My point is that because the> 'Internet' NIC has an address of 192.168.0.70, there is already NAT routing> somewhere on that network. ... Re-configuring ICS may work fine, but it places> you in a double NAT situation which frequently causes problems. ...
    (microsoft.public.win2000.networking)
  • Re: Internet access via other computer without using ICS
    ... You need some sort of NAT (Network Address Translation) software. ... Since ICS ... > Is there any way to configure a networked computer to access the internet ...
    (microsoft.public.windowsxp.network_web)
  • Re: What machine to install ZoneAlarm on in a small home network
    ... > internet and other machines connect via that one, ... > to install it on the 1 machine that connects to the internet. ... ZAP works with ICS, but you will have to tell it that ICS is OK to access the ...
    (comp.security.firewalls)