Re: ZoneAlarm and IIS

From: Duane Arnold (notme_at_notme.com)
Date: 06/26/04 

Date: Sat, 26 Jun 2004 20:29:12 GMT

"Stephen W. Hiemstra" <hiemstra@cox.net> wrote in
news:a%4Dc.176$fd3.123@lakeread04:

> I need to do some web development work on my home network. Each
> machine is protected by ZoneAlarm 5.0. Several problems arise:
>
> First, ZoneAlarm seems to block a simple test (default.htm) on
> individual machines. When I turn it off, the test works. How do I
> allow local use of IIS without leaving myself open to attack?

Flat-out you should be behind the protection of a NAT router with IIS
running that cost as much as ZA.

http://www.homenethelp.com/web/explain/about-NAT.asp

Secondly, you can drop ZA behind the NAT router and use IPsec on the WEB
server machine to do your devlopment. You can then enable ZA after you
are done.

http://www.petri.co.il/block_ping_traffic_with_ipsec.htm
http://www.analogx.com/contents/articles/ipsec.htm

Duane :)

Relevant Pages

  • Re: XPs Firewall
    ... Windows Firewall would certainly have blocked them. ... ZoneAlarm has better reporting and is more configurable than the Windows ... It is also easier to configure different levels of protection ... Personally I use a NAT router and the Windows Firewall. ...
    (microsoft.public.security.virus)
  • Re: Host Computer with ICS cannot be accessed
    ... >It shows on the dial up connection that there is a little firewall lock... ... Is the router protection enough from outside intrusion? ... A NAT router will protect you from unsolicited incoming traffic. ... The second layer is a software firewall, or a port monitor like Port Explorer ...
    (microsoft.public.windowsxp.network_web)
  • Re: Host Computer with ICS cannot be accessed
    ... >>laptop uses a PC card for wireless connection to the router. ... Is the router protection enough from outside intrusion? ... > 2) A NAT router will protect you from unsolicited incoming traffic. ... > The second layer is a software firewall, or a port monitor like Port Explorer ...
    (microsoft.public.windowsxp.network_web)
  • Re: IIS 6 features
    ... I'm answering this without a lot of experience using IIS 6, ... Rapid-fail protection places the application ... > Rapid-fail protection also helps protect a Web server against ... Passport is a Web service that is maintained by Microsoft, ...
    (Focus-Microsoft)
  • Re: OT: Warning about Norton Internet Security
    ... you don't have the software protection that would detect it? ... Thanks for the journey into the realm of possible infections, ... He obviously needed anti-virus software or maybe better still, ... BTW, my laptop with 2K and XP, has no safeguards other than Zonealarm. ...
    (alt.sys.pc-clone.dell)