Tuesday, June 3, 2008

ZoneAlarm

ZoneAlarm is a software firewall originally developed by Zone Labs, which was acquired in 2003 by Check Point. It includes an inbound intrusion detection system, as well as the ability to control which programs can create outbound connections — the latter not available in the Windows XP Service Pack 2 firewall. As of early 2008, the newest release is ZoneAlarm 7.1, the first to be compatible with Windows Vista (32 bit). It is not compatible with 64 bit Windows Vista, and may not be available in near future.

In ZoneAlarm, program access is controlled by way of "zones", into which all network connections are divided. The "trusted zone" generally includes the user's local area network and can share resources such as files and printers, while the "Internet zone" includes everything not in the trusted zone. The user can specify which "permissions" (trusted zone client, trusted zone server, Internet zone client, Internet zone server) to give to a program before it attempts to access the Internet (e.g. before running it for the first time) or, alternatively, ZoneAlarm will ask the user to give the program permission on its first access attempt.

True Vector Internet Monitor

"True Vector Internet Monitor", also known as "TrueVector Security Engine", is the core of ZoneAlarm. It is a Windows service which runs as "vsmon.exe" in the processes list. This Monitors internet traffic and generates alerts for disallowed access.

Operating System Firewall

Operating System Firewall, OSFirewall for short, is a feature in ZoneAlarm paid versions only. This monitors programs and generates alerts when they perform suspicious behaviors.

SmartDefense Advisor

SmartDefense Advisor is a service only available in premium versions of ZoneAlarm that helps the user with certain types of alerts. This utilizes a large database of trusted program signatures in order to provide the user with further advice upon requests from the program in regards to allowing or denying access to the Internet.

Download here.

No comments: