Microsoft Update & Zone Alarm 7.0

[R. McCarty]

Just a little info. Be careful of today's Microsoft Updates on machines
that are using Zone Alarm Free ( Version 7.0.462 ) after rebooting the
Zone Alarm client will block almost every web access with an alert.
Still investigating and trying the newer 7.0.473 version to see if it will
rectify the situation.

 

[Galen Somerville]

Just a little info. Be careful of today's Microsoft Updates on machines
that are using Zone Alarm Free ( Version 7.0.462 ) after rebooting the
Zone Alarm client will block almost every web access with an alert.
Still investigating and trying the newer 7.0.473 version to see if it will
rectify the situation.

Personally I stopped updating at 7.0.337

Galen

 

[noone]

Not convinced it's ZA that's the problem which is why I asked about
KB951748.

 

[R. McCarty]

Haven't isolated the issue, but Zone Alarm blocking all site activity
is the first effect of today's updates that has shown up. Still checking
to see if I can figure out what is going on.

 

[Big_Al]

Haven't isolated the issue, but Zone Alarm blocking all site activity
is the first effect of today's updates that has shown up. Still checking
to see if I can figure out what is going on.

I can't find reference to the KB article in MS? And I've got updates
turned on and it's not offered. But I have ZoneAlarm free 7.0.470.
So I'm interested how you got the update? And of course your
investigation.

 

[noone]

It'll show up if you do a manual update for Windows XP
http://update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us
Probably will be on the auto update laer in the day.

 

[swassociates]

I've experienced the same problem. I also posted the problem on the ZoneAlarm
website.

 

[R. McCarty]

The issue is with KB951748. It's advisable to unselect it as part of the
5 updates available today or uninstall if already applied. ( IF your PC
is using Zone Alarm ).

Cannot say if the hotfix causes issues on PC's that do not have Zone
Alarm installed.

 

[noone]

OK, it is ZA -free or paid.
Current "temporary" solution is to drop the Internet Zone Security slider
from High to Med.
Yeah ,I'm not thrilled either.

 

[Anthony Buckland]

Just a little info. Be careful of today's Microsoft Updates on machines
that are using Zone Alarm Free ( Version 7.0.462 ) after rebooting the
Zone Alarm client will block almost every web access with an alert.
Still investigating and trying the newer 7.0.473 version to see if it will
rectify the situation.

I ran into the problem, and I'm using 7.0.473.000.
It seems a bad idea to implement update KB951748 for the
time being, particularly since it shuts you off from this and other
discussions about it.

 

[MowGreen [MVP]]

I've installed it to 4 different XP versions ... Home, Pro, and
MediaCenter with no issue.
Perhaps a rebuild of the winsock stack would resolve the issue ?

BTW, Mike Nash is now affiliated with a company that just came out with
a firewall. The free version is here:
http://www.tallemu.com/free-firewall-protection-software.html

Knowing Mike, I ***highly*** doubt that any product he would be
associated with has as many issues as Zone Alarm has with updating
Windows. ZA has gone waaayyy downhill since Checkpoint acquired it.

Just my 2¢

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

 

[Anthony Buckland]

I've installed it to 4 different XP versions ... Home, Pro, and
MediaCenter with no issue.
Perhaps a rebuild of the winsock stack would resolve the issue ?

BTW, Mike Nash is now affiliated with a company that just came out with a
firewall. The free version is here:
http://www.tallemu.com/free-firewall-protection-software.html

Knowing Mike, I ***highly*** doubt that any product he would be associated
with has as many issues as Zone Alarm has with updating Windows. ZA has
gone waaayyy downhill since Checkpoint acquired it.

Just my 2¢
...

My couple of hours of extra work dealing with this issue is
that, if Microsoft is going to issue an update incompatible
with a popularly used antivirus product already in use, they
should detect and deal with the problem _before_ users
start finding themselves in serious trouble.

 

[MowGreen [MVP]]

My couple of hours of extra work dealing with this issue is
that, if Microsoft is going to issue an update incompatible
with a popularly used antivirus product already in use, they
should detect and deal with the problem _before_ users
start finding themselves in serious trouble.

You claim it's Microsoft's fault. I claim it's Checkpoint's fault.
Do other XP installations suffer the same issue or is it just one's with
ZA installed ?
I've installed the update on 2 more XP systems, both Home, neither with
a Norton nor Checkpoint product installed, and there has been zero
issues with connectivity. One was on a wireless network, one was not.

This is the latest in a long line of updating issues that are traced to
Zone Alarm. If you don't believe it, just take a trip to the Windows
Update NG or ask any of the other MVPs who frequent that NG if that
statement is correct or not -
news://msnews.microsoft.com/microsoft.public.windowsce.updates

Now, whether those issues occur with beginners as opposed to advanced
Users of firewalls, that's another story.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

 

[sirens]

I ran into the problem, and I'm using 7.0.473.000.
It seems a bad idea to implement update KB951748 for the
time being, particularly since it shuts you off from this and other
discussions about it.

 

[Stephanie]

I ran into the problem, and I'm using 7.0.473.000.
It seems a bad idea to implement update KB951748 for the
time being, particularly since it shuts you off from this and other
discussions about it.

I reported this problem earlier on another forum. The problem is with the
Update KB951748 and not ZoneAlarm. As mention, Internet coonection is
re-established on a firewall setting of Medium. Uninstalling the update
allows you to reset ZA to the highest setting.

I had this update as a notification (yellow shield) in tray. Since it
wouldn't go away, I had to go to the Update site and select 'do not show this
update' to get rid of it.

Will reset for the update once the problem with ZA is fixed. I would be
interested to know if this update affected other firewalls.

Ron

 

[sirens]

seems that removing the generic host process from zone alarm program control
allows some connectivity.maybe theres a link to the problem here?

 

[Kayman]

Just a little info. Be careful of today's Microsoft Updates on machines
that are using Zone Alarm Free ( Version 7.0.462 ) after rebooting the
Zone Alarm client will block almost every web access with an alert.
Still investigating and trying the newer 7.0.473 version to see if it will
rectify the situation.

The best solution of course is to uninstall ZA (Phoney Baloney Ware) from
your OS and use the in-built application in conjunction with SeconfigXP.

 

[MowGreen [MVP]]

No, the issue is caused by Zone Alarm, as explained by a moderator in
the ZA Forum:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

If the windows update changed the usual needed files for networking/internet, then the ZA will not
see the changes and continue to use the previously known files and ignore the newer files. Even though
the file names and locations are still the same from before, now the file size and checksums no longer
match.

This is wholly *** Checkpoint's fault ***, not Microsoft's.
Resetting the ZA database in Safe Mode is the recommended fix. Please
click the ZA Forum URL for the entire fix.
Setting security to "Medium" is not good practice.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

 

[Stephanie]

No, the issue is caused by Zone Alarm, as explained by a moderator in
the ZA Forum:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

If the windows update changed the usual needed files for networking/internet, then the ZA will not
see the changes and continue to use the previously known files and ignore the newer files. Even though
the file names and locations are still the same from before, now the file size and checksums no longer
match.

This is wholly *** Checkpoint's fault ***, not Microsoft's.
Resetting the ZA database in Safe Mode is the recommended fix. Please
click the ZA Forum URL for the entire fix.
Setting security to "Medium" is not good practice.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

:




I reported this problem earlier on another forum. The problem is with the
Update KB951748 and not ZoneAlarm. As mention, Internet coonection is
re-established on a firewall setting of Medium. Uninstalling the update
allows you to reset ZA to the highest setting.

I had this update as a notification (yellow shield) in tray. Since it
wouldn't go away, I had to go to the Update site and select 'do not show this
update' to get rid of it.

Will reset for the update once the problem with ZA is fixed. I would be
interested to know if this update affected other firewalls.

Ron

Sorry. I disagree that it is ZA's fault since nothing has been determined
other than uninstalling the update allows ZA to return to the highest mode
for its firewall. It's too soon to say one way or the other what the exact
cause is, but Microsoft is "famous" for issuing updates and patches that
don't work. It's just the cost of trying to satisfy a lot of different O/Ses
and software although I think it could have been tested on the more popular
software people use before being released.

Ron

 

[R. McCarty]

I have a number of PCs and only those with Zone Alarm are having
issues with KB951748. Obviously if the patch was at fault then the
entire XP base would be affected. Checkpoint is investigating and
will likely issue some sort of "Rapid Release" update to get users up
and running. Hopefully users won't uncheck the Hotfix and end up
with a system that isn't fully patched.

No, the issue is caused by Zone Alarm, as explained by a moderator in
the ZA Forum:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

If the windows update changed the usual needed files for
networking/internet, then the ZA will not
see the changes and continue to use the previously known files and
ignore the newer files. Even though
the file names and locations are still the same from before, now the
file size and checksums no longer
match.

This is wholly *** Checkpoint's fault ***, not Microsoft's.
Resetting the ZA database in Safe Mode is the recommended fix. Please
click the ZA Forum URL for the entire fix.
Setting security to "Medium" is not good practice.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

:



Just a little info. Be careful of today's Microsoft Updates on
machines
that are using Zone Alarm Free ( Version 7.0.462 ) after rebooting the
Zone Alarm client will block almost every web access with an alert.
Still investigating and trying the newer 7.0.473 version to see if it
will
rectify the situation.


I ran into the problem, and I'm using 7.0.473.000.
It seems a bad idea to implement update KB951748 for the
time being, particularly since it shuts you off from this and other
discussions about it.





I reported this problem earlier on another forum. The problem is with
the
Update KB951748 and not ZoneAlarm. As mention, Internet coonection is
re-established on a firewall setting of Medium. Uninstalling the
update
allows you to reset ZA to the highest setting.

I had this update as a notification (yellow shield) in tray. Since it
wouldn't go away, I had to go to the Update site and select 'do not
show this
update' to get rid of it.

Will reset for the update once the problem with ZA is fixed. I would
be
interested to know if this update affected other firewalls.

Ron

Sorry. I disagree that it is ZA's fault since nothing has been determined
other than uninstalling the update allows ZA to return to the highest mode
for its firewall. It's too soon to say one way or the other what the
exact
cause is, but Microsoft is "famous" for issuing updates and patches that
don't work. It's just the cost of trying to satisfy a lot of different
O/Ses
and software although I think it could have been tested on the more
popular
software people use before being released.

Ron