Security Question

[JamesJ]

Hi. After installing to SP2 I find that IE is blocking some web pages. The
reason's I believe are activex and or some scripting. I'm currently using
Norton Personal Firewall. When something gets blocked I need to check both
programs to find which is doing the blocking, although I believe it's IE.
Question: Is it advisable to set all IE security levels to Low and allow NPF
do the work??

Any help will be appreciated,
James

 

[Chuck]

Hi. After installing to SP2 I find that IE is blocking some web pages. The
reason's I believe are activex and or some scripting. I'm currently using
Norton Personal Firewall. When something gets blocked I need to check both
programs to find which is doing the blocking, although I believe it's IE.
Question: Is it advisable to set all IE security levels to Low and allow NPF
do the work??

Any help will be appreciated,
James

James,

Internet Explorer security levels are zoned. That is, you can designate any
networked site to be treated with an appropriate amount of trust, and scripting
permitted accordingly.
- Local intranet (totally trusted)
- Trusted sites (Internet somewhat trusted)
- Internet (Internet minimally trusted)
- Restricted sites (Internet UNTRUSTED)

If there's a website that you can't use successfully because of blocked content
(scripting), IMHO you should designate that specific site as Trusted while you
analyse the blocking of scripting, on that site, by NPF. And setup Trusted
sites security levels appropriately.

But I would not set my entire Internet Explorer security level lower. I would
not trust NPF for all my protection.

Appropriate settings for Internet Explorer security are well described by Eric
Howes, a trusted security advisor (check out discussions in
alt.computer.security and microsoft.public.security for instance):
<https://netfiles.uiuc.edu/ehowes/www/main.htm> "IE-SPYAD".

And James, please don't contribute to the spread and success of email address
mining viruses. Learn to munge your email address properly, to keep yourself a
bit safer when posting to open forums. Protect yourself and the rest of the
internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[JamesJ]

Thanks for the info and advise.

James

James,

Internet Explorer security levels are zoned. That is, you can designate
any
networked site to be treated with an appropriate amount of trust, and
scripting
permitted accordingly.
- Local intranet (totally trusted)
- Trusted sites (Internet somewhat trusted)
- Internet (Internet minimally trusted)
- Restricted sites (Internet UNTRUSTED)

If there's a website that you can't use successfully because of blocked
content
(scripting), IMHO you should designate that specific site as Trusted while
you
analyse the blocking of scripting, on that site, by NPF. And setup
Trusted
sites security levels appropriately.

But I would not set my entire Internet Explorer security level lower. I
would
not trust NPF for all my protection.

Appropriate settings for Internet Explorer security are well described by
Eric
Howes, a trusted security advisor (check out discussions in
alt.computer.security and microsoft.public.security for instance):
<https://netfiles.uiuc.edu/ehowes/www/main.htm> "IE-SPYAD".

And James, please don't contribute to the spread and success of email
address
mining viruses. Learn to munge your email address properly, to keep
yourself a
bit safer when posting to open forums. Protect yourself and the rest of
the
internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.