Re: ZoneAlarmFree - Updating/Upgrading?

On Thu, 07 Feb 2008 23:49:22 GMT, Neil Turkenkopf wrote:

Hi folks,

[PC running WinXP Pro fully patched]

I have been using the free version of Zone Alarm as my personal firewall for
several years now with no trouble.
I am still running version 6.5.737.000, and everything works great. I
occasionally get alerts from Secunia telling me that my version is no longer
secure and that I should upgrade. After scanning the ZAF Forums it sounds
like there's total confusion as to what version is needed to update what.
There are some newer versions available, but they seem to be Trial versions
which include other software modules like AV, Anti-Spam, etc.

So, I could use a little advice, and basically my questions are these:

Is there a current stable version of the Zone Alarm Free (firewall only)
that I can upgrade my older 6.5.737.000 version to? I do not want or need
another Anti-Virus program, or any other package deal or software suite, I
just want to replace/upgrade the personal firewall itself.

Does anyone know if such a thing from Zone Alarm exists? (And if so,
where/how did you find it?)
Alternatively, is there another brand of (free) Personal Firewall that you
would recommend instead?


Uninstall ZA, it's Phoney-Baloney ware
http://zonealarm.donhoover.net/uninstall.html

Activate and utilize the Win XP SP2 built-in Firewall; Uncheck *all*
Programs and Services under the Exception tab.
Read through:

Understanding Windows Firewall.
http://www.microsoft.com/windowsxp/using/security/internet/sp2_wfintro.mspx

Using Windows Firewall.
http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx

How to manually open ports in Internet Connection Firewall in Windows XP.
http://support.microsoft.com/kb/308127

How to Configure Windows Firewall on a Single Computer.
http://www.microsoft.com/technet/security/smallbusiness/prodtech/windowsxp/cfgfwall.mspx

Troubleshooting Windows Firewall settings in Windows XP Service Pack 2.
http://support.microsoft.com/default.aspx?kbid=875357

PFW Criticism.
http://en.wikipedia.org/wiki/Personal_firewall#Criticisms

"Personal Firewalls" are mostly snake-oil.
http://www.samspade.org/d/firewalls.html

Why your firewall sucks.
http://tooleaky.zensoft.com/
"But I quickly realized the truth: The added protection provided by
outbound filtering is entirely illusory."

At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx

Deconstructing Common Security Myths.
http://www.microsoft.com/technet/technetmag/issues/2006/05/SecurityMyths/default.aspx
Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."

Exploring the windows Firewall.
http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx
"Outbound protection is security theater—it’s a gimmick that only gives the
impression of improving your security without doing anything that actually
does improve your security."

In conjunction with WinXP SP2 Firewall use:
Seconfig XP 1.0
http://seconfig.sytes.net/
(http://www.softpedia.com/progDownload/Seconfig-XP-Download-39707.html)
Seconfig XP is able configure Windows not to use TCP/IP as transport
protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135, 137-139
and 445 (the most exploited Windows networking weak point) closed.)
OR
Configuring NT-services much more secure.
http://www.ntsvcfg.de/ntsvcfg_eng.html

The best defenses are:

1. Do not work as 'Administrator'; For day-to-day work routinely use a
Limited User Account (LUA).
2. Secure (Harden) your operating system.
3. Keep your operating (OS) system (and all software on it)
updated/patched.
4. Reconsider the usage of IE and OE.
5. Review your installed 3rd party software applications/utilities;
Remove clutter.
6. Don't expose services to public networks.
7. Activate the build-in firewall and configure Windows not to use
TCP/IP as transport protocol for NetBIOS, SMB and RPC, thus leaving
TCP/UDP ports 135,137-139 and 445 (the most exploited Windows
networking weak point) closed.
7a. If on high-speed internet use a router as well.
8. Routinely practice safe-hex.
9. Regularly back-up data/files.
10. Familiarize yourself with crash recovery tools and with
re-installing your operating system (OS).
11. Utilize a real-time anti-virus application and vital system
monitoring utilities/applications.
12. Keep abreast of the latest developments - Sh!t happens...you know.

The least preferred defenses are:
Myriads of popular anti-whatever applications and staying ignorant.

--
Security is a process not a product.
(Bruce Schneier)
.

Relevant Pages

  • RE: [Full-Disclosure] [OFFTOPIC] Zone Alarm
    ... make a mistake interacting with Zone Alarm vs say, a Linksys firewall. ... If you understand security, ...
    (Full-Disclosure)
  • Help with security center and firewall
    ... I unistalled my Norton Internet Security and it seems that it took with ... Windows cannot display Windows firewall ... So I then go to the Windows Security Center in the Control Panel. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Paranoia or something more sinister?
    ... I should add that you want to verify that your current firewall is correctly ... > make sure that auditing of logon events is enabled in Local Security ... >> reinstalls, upgraded Norton Security to 05, I'm operating Service Pack 2 ... Search & Destroy and a Windows Firewall. ...
    (microsoft.public.security)
  • Re: SERVICES - Manual Settings
    ... "The Windows Firewall and Security Center should be set to Automatic" ... I Have the Following Startup Type Settings on "Manual" but. ...
    (microsoft.public.windowsxp.general)
  • Re: My Windows Firewall Keeps Turning off!
    ... I turn it on again I get a Security box from McAfee security center ... Then I have to open "Windows Firewall settings" and turn it on again. ...
    (microsoft.public.windowsxp.help_and_support)