Zone Alarm Which applications to allow

Hi
I know some where on the boards i have seen a post which gives a link to a site which has a list of applications to allow in Zone Alarm.
Can anyone tell me where I might have seen this.
Stitch

 

Hello stitch,

Until you find that list, you can do the following:

1 Go thru the app list and disable server rights. You may need server rights for chat clients such as AIM or MSN Messenger, so turn back on accordingly.

2 Block all apps and processes with the exception of IE (or whatever you use as the browser) and Generic Host Process for Win32 Services - wouldn't be able to get on the internet w/o them enabled.

Now you can see what works - not works and enable apps at need.

Regards - Charles

 

Stitch--Being a bit more paranoid, I have given no programs Zone Alarm "Server Rights" (I do not run a message program). I have noticed no problems running my PC or surfing the net.
And the only programs I have given automatic "Allow connection" rights to (different from "server rights ") are my browser, email programs and a time synch program. That means whenever another program wants to access the internet, it must ask permission. That allows me to see what the program is and say "Yes" or "No" accordingly. I suppose if any program were to come up with that request frequently, and I was sure it was a legitimate request, I might "allow connection" automatically. (Adobe Acrobat asks any time I use it, but I know all they want to do is offer me an update, so I never give permission.)
By the way, from ZA's Help
"Many Trojan Horse programs are designed to be servers, waiting for connections and instructions from remote clients. You can use ZoneAlarm to detect server programs that are listening for such requests.

When ZoneAlarm detects server activity, the firewall will block the incoming connection for any program that is already on your Programs List where a red X appears in the Allow Server column.

Examples of server programs include Web, FTP, and e-mail servers.

The Programs icon indicates Internet servers and applications listening for connections by a hand holding the program icon.

To grant a specific program the right to act as a server, go to the Programs panel and check the Allow Server checkbox for that program. ZoneAlarm will deny connection, and display a popup warning when a program you have not given server permission to tries to connect.


Communication applications like ICQ or NetMeeting, usually require server rights in order to function properly with ZoneAlarm. "

 

Hi Jim,

*I have given no programs Zone Alarm "Server Rights" (I do not run a message program). I have noticed no problems running my PC or surfing the net.*

I just got back in WinMe where I run ZAP and looked at the Server Rights list. I don't give anything server rights either, including MSN Messenger and, like your experience, it works fine.

Regards - Charles

 

charlesvar--Until this thread, I had really never thought too hard about Zone Alarm's "Server Rights ". This thread made me look up ZA's description in Help. Seems I chose the right route by chance.

 

Thanks All
For your imput. I havn't given server rights to any application as that is one thing I was told about when I first installed it. Its just some of the programs that come up I have never heard of and wondered if there was a list of safe applications.
Stitch
ps will look at the zone alarm site for any info. thanks

 

stitch

Those may, but not necessarily, indicate that your computer is infected, so be sure to keep antivirus updated and NEVER allow any you don't know to access the web. Check remember before clicking no.

 

Hi sparrow,

*Check remember before clicking no.*

That's negating the whole idea of investigating what to allow and or not.

The idea is to allow apps to ASK for access and saying no/yes until a decision is made to permanently having the firewall deny/allow. WHEN an app/process does the asking may tell the user something about it - seeing what else is running for instance.

Regards - Charles

 

Sparrow
I allways keep on top of security on my comp. Only time ever to get infected was when I did a reformatt and went online with out the firewall. Caught the blaster. Never made same mistake again. I keep all work comps clean and tidy to. I do my house cleaning every week on the ten I have at work.
My question as I said really was to do with the pop ups all the time for access to net Such as backweb or application gateway?????? not a clue as to what they are. So I just dont put a tick in remember answer. which is why i wondered if there was a list of safe applications
Stitch

 

Hello stitch,

Went looking for the two that you mentioned:

http://mysearch.myway.com/jsp/GGmai...n+layer+gateway&st=site&speedbarconfigchanged For Application Layer Gateway - need to access the internet. To verify that, block it and see what happens.

http://mysearch.myway.com/jsp/GGmain.jsp?searchfor=backweb&st=site&ptnrS= For Backwebb. This may have been foisted on you. Block it, see what happens.

Regards - Charles

 

There are some links you can check against.
http://www.kephyr.com/filedb/index.php?source=bottomlink
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm
http://www.windowsstartup.com/wso/search.php
These three are not complete, but are good resources.
There is always Googling

 

stitch,

If you're using ZA Pro you've probably seen the "more info ", or such, button on the request for access window. Clicking that allows ZA to access its online database to tell you exactly who/what's trying to use your computer. That's quicker than looking for a list, which is unlikely to be as up to date anyway.

You and I don't want anything using our computers that we didn't invite to use them; I assume that's the reason for your original query.

charlesvar,

Correct. I like to keep things simple, and limit investigation to more worthwhile (for me) endeavors. This is not about investigation anyway. The whole point of a list is that someone else has done the investigation.