ZoneAlarm User Community
ZoneAlarm User Community
 

Go Back   ZoneAlarm User Community > ZoneAlarm Forums > Security Issues

Reply
 
Thread Tools Display Modes
  #1  
Old March 9th, 2010, 09:47 PM
MosheB MosheB is offline
Junior Member
 
Join Date: Mar 2010
Posts: 3
Exclamation Zone Alarm loads after other applications at startup

When I boot my computer (Win XP), other applications load before Zone Alarm, including the wireless Internet connection and applications that access the Internet which I have set Zone Alarm to block.

Zone Alarm eventually does load, after which it blocks those applications, but in the time before Zone alarm has loaded, they have full Internet access -- and they can and do access the Internet before Zone Alarm loads. This is a serious security vulnerability of Zone Alarm.

Ideally, the firewall should be the first application that loads on startup, even before an Internet connection is established, or at least before other applications load.

My work-around is to physically disconnect my computer from the Internet and restore the connection only after Zone Alarm has loaded and is active. This is not ideal, however, because it creates the annoyance of Zone Alarm thinking that a "new network" has been added and nagging me about it.

Is there a fix for this?

Last edited by Forum-Moderator; March 15th, 2010 at 11:46 AM. Reason: Not a true security vulnerability in ZA so removing that incorrect statement from title.
Reply With Quote
  #2  
Old March 9th, 2010, 09:57 PM
fax's Avatar
fax fax is offline

Guru

 
Join Date: Nov 2004
Location: localhost
Posts: 13,624
Default Re: Security Vulnerability -- Zone Alarm loads after other applications at startup

Hi!
no, ZA service (vsmon.exe) start even before you log in on the system. What you see loading is the GUI (graphic user interface).

You are perfectly safe.

Cheers,
Fax
__________________

Click here for ZA Technical Support
Avail. 24x7 hours - Excl. Holiday
Click here for ZA Customer Support
Avail. 24x7 hours - Excl. Holiday

Last edited by fax; March 9th, 2010 at 10:00 PM.
Reply With Quote
  #3  
Old March 13th, 2010, 11:01 PM
MosheB MosheB is offline
Junior Member
 
Join Date: Mar 2010
Posts: 3
Question Re: Security Vulnerability -- Zone Alarm loads after other applications at startup

>no, ZA service (vsmon.exe) start even before you log in on the system. What you see loading is the GUI (graphic user interface).
>You are perfectly safe.

If that's the case, why is my Bablylon application able to access the Internet before the Zone Alarm GUI is running? I set the Babylon application to be blocked. After Zone Alarm GUI is running, Babylon can't access the Internet. Theoretically, it shouldn't ever be able to access the Internet, but when when I turned on my computer, Babylon started & popped up a message verifying that it accessed the Internet and downloaded some information. After the Zone Alarm GUI is up Babylon is blocked and can't do this.
Reply With Quote
  #4  
Old March 13th, 2010, 11:08 PM
fax's Avatar
fax fax is offline

Guru

 
Join Date: Nov 2004
Location: localhost
Posts: 13,624
Default Re: Security Vulnerability -- Zone Alarm loads after other applications at startup

Quote:
Originally Posted by MosheB View Post
If that's the case, why is my Bablylon application able to access the Internet before the Zone Alarm GUI is running?
Applications are blocked according to your rules regardless of the GUI.
Note that logging will be active only when the GUI is up. In other words, blocking/allowing will be honored but not logged before the GUI is up.

If they are not blocked, three possibilities:

1. The application says it connects but its not true
2. You are not blocking correctly the application or blocking a different part of the application
3. Your ZA is corrupted

I don't use that software so I can't help on how to set it up. You may want to ask the developer of that software what is the executable that connects to the internet.
If you have a licensed version of ZA you can contact, free of charge, the ZA technical support (if it is a ZA issue). If not, you are out of lack

Cheers,
Fax
__________________

Click here for ZA Technical Support
Avail. 24x7 hours - Excl. Holiday
Click here for ZA Customer Support
Avail. 24x7 hours - Excl. Holiday

Last edited by fax; March 13th, 2010 at 11:14 PM.
Reply With Quote
  #5  
Old March 14th, 2010, 01:48 AM
MosheB MosheB is offline
Junior Member
 
Join Date: Mar 2010
Posts: 3
Post Re: Security Vulnerability -- Zone Alarm loads after other applications at startup

Thanks, fax,

The only thing I can think of is #2 -- that it's a different part of the application that isn't being blocked. I've looked and so far haven't found any other portions that try to access the Internet. But I'll keep checking.

Have a great day,

MosheB
Reply With Quote
  #6  
Old March 14th, 2010, 01:50 AM
fax's Avatar
fax fax is offline

Guru

 
Join Date: Nov 2004
Location: localhost
Posts: 13,624
Default Re: Security Vulnerability -- Zone Alarm loads after other applications at startup

You're welcome!

Cheers,
Fax
__________________

Click here for ZA Technical Support
Avail. 24x7 hours - Excl. Holiday
Click here for ZA Customer Support
Avail. 24x7 hours - Excl. Holiday
Reply With Quote
Reply

Bookmarks


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Zone Alarm Extreme Security won't run automatically at startup llarry58 ZoneAlarm Configuration 3 March 7th, 2010 01:02 AM
ZoneAlarm loads at windows startup - Windows Security Alerts inform that Firewall is disabled wetabax Windows and ZoneAlarm Messages and Alerts 12 April 4th, 2008 02:09 AM


All times are GMT -8. The time now is 06:09 PM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
©2003-2010 Check Point Software Technologies Ltd. All Rights Reserved.