Microsoft Update & Zone Alarm 7.0

J

JosephV

All you have to do is add the necessary outgoing ports in ZoneAlarm Internet
Zone. I added 80, 443, 25, 110 as minimum. Then browsing should magically
continue.
 
G

Galen Somerville

No, the issue is caused byZoneAlarm, as explained by a moderator in
the ZA
Forum:http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message...
If the windowsupdatechanged the usual needed files for
networking/internet, then the ZA will not
see the changes and continue to use the previously known files and
ignore the newer files. Even though
the file names and locations are still the same from before, now the
file size and checksums no longer
match.

This is wholly *** Checkpoint's fault ***, notMicrosoft's.
Resetting the ZA database in Safe Mode is the recommended fix. Please
click the ZA Forum URL for the entire fix.
Setting security to "Medium" is not good practice.

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


"Anthony Buckland" wrote:
I reported this problem earlier on another forum. The problem is with
the
UpdateKB951748 and not ZoneAlarm. As mention, Internet coonection is
re-established on a firewall setting of Medium. Uninstalling theupdate
allows you to reset ZA to the highest setting.
I had thisupdateas a notification (yellow shield) in tray. Since it
wouldn't go away, I had to go to theUpdatesite and select 'do not show
this
update' to get rid of it.
Will reset for theupdateonce the problem with ZA is fixed. I would be
interested to know if thisupdateaffected other firewalls.
Ron- Hide quoted text -

- Show quoted text -

I've already tried the ZA fix described in the forum and it didn't
work. Has anybody else tried it?

I installed the new basic (free) firewall then installed the ms update.

All works fine here.

Galen
 
H

HB

My insternet providerTech support suggested that I call ZoneAlarm for this
issue (1-877-365-9663) however, I kept receiving a recording to the effect
of: "try to call at a later time"

The only way for me to access my e-mail is by disabling (shutting down)
ZoneAlarm. In doing so, my NortonAV gives me a message that
Internet/advanced Firewall : At Risk.
Maybe it's wise to uninstall KB951748
 
F

fieldmouse

I don't have Zone Alarm installed and this update freezes my access to
internet and to my Outlook for email.
 
P

PA Bear [MS MVP]

Resolution [was Workaround] for Sudden Loss of Internet Access Problem
(revised multiple times since release on 08 July 2008)
http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

NB: Do NOT use Option #2 if at all possible! The vulnerability addressed by
KB951748 *is* a big deal! See
http://blog.washingtonpost.com/securityfix/2008/07/patch_the_entire_internet_tues_1.html

Want to consider other, more highly-rated firewalls?
http://www.matousec.com/projects/firewall-challenge/results.php
 
D

Damien

R. McCarty said:
Just a little info. Be careful of today's Microsoft Updates on machines
that are using Zone Alarm Free ( Version 7.0.462 ) after rebooting the
Zone Alarm client will block almost every web access with an alert.
Still investigating and trying the newer 7.0.473 version to see if it will
rectify the situation.

Just ran into the same issue myself. Workaround is to downgrade security
from High to Medium for Internet Zone.

FYI, It's all over ZoneAlarm's home page. Check out the link

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

They have updated versions of their software that will fix the issue.

Regards
 
M

Mike B.

hello, I have the same issue as everyone else because I'm running zone alarm
as well. I went to add/remove programs and can't find it to uninstall it.
Does anyone have a suggestion? thanks
 
K

Kayman

...

I appreciate your consistency, MG, but what it tells a number
of us is that Microsoft issued an update safe on only
some systems, namely those whose users had not opted to
use ZoneAlarm as their AV. If it had been safe only on all
machines except Dells, or all machines without WordPerfect
installed, or all systems which use Outlook Express for
mail, would you still say there was no issue?

do your homework.

http://securosis.com/2008/07/08/dan...ue-in-dns-massive-multivendor-patch-released/

Mr. Kaminsky immediately reported the issue to major authorities, including
the United States Computer Emergency Response Team (part of the Department
of Homeland Security), and began working on a coordinated fix. Engineers
from *major technology vendors* around the world converged on the Microsoft
campus in March to coordinate their response. All of the vendors began
repairing their products and agreed that a synchronized release, on a
single day, would minimize the risk that malicious individuals could figure
out the vulnerability before all vendors were able to offer secure versions
of their products.
 
J

Jeanni

What was microsoft thinking -- I've used zone alarm for years and they have
protected me more than any other. Never had any trouble untill --KB951748
Come on Microsoft get this straightened out you made the update. Why do I
have to lose my protection for the update KB951748. It seems that the Poor
Quality isn't with ZoneAlarm.
Alittle more than 2cents

DEFENDER01 said:
'MowGreen [MVP said:
;3150788']I've installed it to 4 different XP versions ... Home, Pro,
and
MediaCenter with no issue.
Perhaps a rebuild of the winsock stack would resolve the issue ?

BTW, Mike Nash is now affiliated with a company that just came out with

a firewall. The free version is he
http://tinyurl.com/34d8b4

Knowing Mike, I ***highly*** doubt that any product he would be
associated with has as many issues as Zone Alarm has with updating
Windows. ZA has gone waaayyy downhill since Checkpoint acquired it.

Just my 2¢

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============



R. McCarty wrote:
-
The issue is with KB951748. It's advisable to unselect it as part of
the
5 updates available today or uninstall if already applied. ( IF your
PC
is using Zone Alarm ).

Cannot say if the hotfix causes issues on PC's that do not have Zone
Alarm installed.

"swassociates" (e-mail address removed) wrote in message

-
I've experienced the same problem. I also posted the problem on the
ZoneAlarm
website.




:

-
Just a little info. Be careful of today's Microsoft Updates on
machines
that are using Zone Alarm Free ( Version 7.0.462 ) after rebooting the
Zone Alarm client will block almost every web access with an alert.
Still investigating and trying the newer 7.0.473 version to see if it
will
rectify the situation.
Thanks for the thumbs up on online Armor.
after installing the new Microsoft update i was no longer able to go
online.

zonalarm has not been good lately and i have now downloaded online
Armor.
this seems to be a great Firewall

Many thanks for the info.
Clive.
 
Z

zaghy2zy

I agree, Microsoft should have tested compatibility of this update even
before it went out... and now that it's out, they should make an update that
would allow us to install KB951748 and fix the blockage of the internet
access... Currently, I removed KB951748 from my update, and I might install
it if there would be an update to fix the conflict with KB951748 and Zone
Alarm (and also other firewall application that conflicted with KB951748)
 
M

M. Armantrout

I have the same problem that after installing KB951748, my access to the
internet fails. I have to uninstall the patch to get back online. I have the
free ZoneAlarm 7.0.470. Someone screwed up something, not sure who. Thanks
for the tips everyone.
 
T

tarmi

I disagree, for the fact that I have a different firewall (look'n'stop) and
have the same problem.



MowGreen said:
Anthony said:
My couple of hours of extra work dealing with this issue is
that, if Microsoft is going to issue an update incompatible
with a popularly used antivirus product already in use, they
should detect and deal with the problem _before_ users
start finding themselves in serious trouble.

You claim it's Microsoft's fault. I claim it's Checkpoint's fault.
Do other XP installations suffer the same issue or is it just one's with
ZA installed ?
I've installed the update on 2 more XP systems, both Home, neither with
a Norton nor Checkpoint product installed, and there has been zero
issues with connectivity. One was on a wireless network, one was not.

This is the latest in a long line of updating issues that are traced to
Zone Alarm. If you don't believe it, just take a trip to the Windows
Update NG or ask any of the other MVPs who frequent that NG if that
statement is correct or not -
news://msnews.microsoft.com/microsoft.public.windowsce.updates

Now, whether those issues occur with beginners as opposed to advanced
Users of firewalls, that's another story.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
F

ffixxer

Mike B. said:
hello, I have the same issue as everyone else because I'm running zone alarm
as well. I went to add/remove programs and can't find it to uninstall it.
Does anyone have a suggestion? thanks
 
F

ffixxer

Click the "Start Menu"
Click "Control Panel", or click "Settings" then "Control Panel"
Click on "Add or Remove Programs"

On the top of the add/remove programs dialog box, you should see a checkbox
that says "show updates". Select this checkbox

Scroll down until you see "Security update for Windows (KB951748)"
Click "Remove" to uninstall the hotfix
 
P

Phil

I should have done a search for this earlier! i've been using system restore
for the past 2 days because net access was getting blocked... i was thinking
we had a virus or something. then it occured to me that it might have been
the updates so i unistalled the above mentioned KB951748.

BTW, we use ZA too...
 
K

Kayman

What was microsoft thinking -- I've used zone alarm for years and they have
protected me more than any other. Never had any trouble untill --KB951748
Come on Microsoft get this straightened out you made the update. Why do I
have to lose my protection for the update KB951748. It seems that the Poor
Quality isn't with ZoneAlarm.
Alittle more than 2cents

Your 2 cents+ are wasted (embarrasing, really) - do your homework!

http://securosis.com/2008/07/08/dan...ue-in-dns-massive-multivendor-patch-released/

....Mr. Kaminsky immediately reported the issue to major authorities,
including the United States Computer Emergency Response Team (part of the
Department of Homeland Security), and began working on a coordinated fix.
Engineers from *major technology vendors* around the world converged on the
Microsoft campus in *March* to coordinate their response. All of the
vendors began repairing their products and agreed that a synchronized
release, on a single day, would minimize the risk that malicious
individuals could figure out the vulnerability before all vendors were able
to offer secure versions of their products.
 
K

Kayman

I agree, Microsoft should have tested compatibility of this update even
before it went out... and now that it's out, they should make an update that
would allow us to install KB951748 and fix the blockage of the internet
access... Currently, I removed KB951748 from my update, and I might install
it if there would be an update to fix the conflict with KB951748 and Zone
Alarm (and also other firewall application that conflicted with KB951748)

You agree?? Have you done your homework??

http://securosis.com/2008/07/08/dan...ue-in-dns-massive-multivendor-patch-released/

....Mr. Kaminsky immediately reported the issue to major authorities,
including the United States Computer Emergency Response Team (part of the
Department of Homeland Security), and began working on a coordinated fix.
Engineers from *major technology vendors* around the world converged on the
Microsoft campus in *March* to coordinate their response. All of the
vendors began repairing their products and agreed that a synchronized
release, on a single day, would minimize the risk that malicious
individuals could figure out the vulnerability before all vendors were able
to offer secure versions of their products...
 
K

Kayman

Not at all. I'm just looking at the time line, which has
the latest (so far as I know) ZoneAlarm release in use
for at least over a month, whereas the Microsoft update we're
talking about just came out. The fault may well lie in
the ZoneAlarm code, but Microsoft's prerelease testing
should have included all the most popular antivirus
products, and a warning should have accompanied the
update description. I'm not saying Microsoft necessarily
need to modify their update, just that they should warn
their users if that update should be avoided by some
of those users until the maker of the product they're
using modifies _its_ product.

IMHO.

Your opinion is way out of line!

http://securosis.com/2008/07/08/dan...ue-in-dns-massive-multivendor-patch-released/

....Mr. Kaminsky immediately reported the issue to major authorities,
including the United States Computer Emergency Response Team (part of the
Department of Homeland Security), and began working on a coordinated fix.
Engineers from *major technology vendors* around the world converged on the
Microsoft campus in *March* to coordinate their response. All of the
vendors began repairing their products and agreed that a synchronized
release, on a single day, would minimize the risk that malicious
individuals could figure out the vulnerability before all vendors were able
to offer secure versions of their products...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top