SP2 - Security

  • Thread starter Thread starter Menno Hershberger
  • Start date Start date
M

Menno Hershberger

Every time I boot up I get "security warnings" about Antivirus and
Firewall. It detects that Norton is installed but can't determine it's
status. Same way with Zone Alarm.
You'd think that those two products' status would be detectable.
Both are up to date.
Anyone else seeing this?
 
Thanks for the quick reply!
On another note, I wonder if I should just drop Zone Alarm and use the
new Windows firewall. I'm behind a router anyway.
 
Menno said:
Thanks for the quick reply!
On another note, I wonder if I should just drop Zone Alarm and use the
new Windows firewall. I'm behind a router anyway.
Click to expand...

SP2 firewall has no outbound security, if that is important to you .

Q
 
It is if you take care of and monitor what is installed on your system. The
need for outbound detection indicates that you allowed a trojan (virus) or
other spyware to be installed in the first place.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
doesn't the router have firewall settings?

and zonealarm and norton will conflict occationally
 
No one but you suggested "outbound security is meaningless".
Outbound security is far less important than inbound.
If you have unknowns going out, you have already failed because
something got in to send something out.
If you diligently maintain your computer, there is nothing undesirable
to send anything out.

For many users Windows XP Internet Connection Firewall is best because
it is so basic.
Some users would disable a more complex firewall rather than try to
figure it out.

For other users there are a variety of 3rd party firewalls to meet
individual needs.
 
I don't think there is any need to use a third party firewall in
XPSP2.It's default firewall is an excellent one.

S:

IMO, the SP2 default firewall is not excellent as it is outbound only.
I have been running ZA free v5.1.011 with SP2 RTM (& RC2) w/o problems.
 
Do you mean inbound only?
If you are diligent about maintaining your computer there should be no
unknowns going out.
If there is, you have already failed by letting it take control of the
computer from the inside.
 
Jupiter said:
If you are diligent about maintaining your computer there should be no
unknowns going out.
If there is, you have already failed by letting it take control of the
computer from the inside.
Click to expand...

Agreed.
 
JJ:
Yes. SP2 does inbound only (thanks for catching that).
unknowns going out. If there is, you have already failed by letting it take
control of the computer from the inside.

I want control of the know apps (& the unknows).
IMO, it is wise to run a host based outbound controlling firewall.
 
If it saves even one person who reads these news groups from having their
credit card information stolen (by a trojan - installed either with free
software or acquired through a drive by download), then it is proper to tell
them to have a firewall that controls outbound traffic also.

Feeling despondent about it, after the fact (when your account has been
drained), is not the ideal time to install ZoneAlarm.

--
Regards:

Richard Urban

aka Crusty (-: Old B@stard :-)
 
A very valid point.
I still think many users will simply disable the firewall if there is
to much to configure.
The ICF is so basic and simple fewer users would disable it.

However for the users that will take the time a 3rd party firewall is
a better option because it can give them better control.
 
"Jupiter Jones [MVP]" <[email protected]> squirted these
wordjisms deep inside the bumtube of the newstwat in @TK2MSFTNGP12.phx.gbl:
Do you mean inbound only?
If you are diligent about maintaining your computer there should be no
unknowns going out.
If there is, you have already failed by letting it take control of the
computer from the inside.
Click to expand...


Or perhaps the user has shown diligence with maintenance, but an IE broswer
hole unkown to the user has let something in.

The user has not 'already failed' then in these circumstances.


--
*********************************
David Qunt
Click to expand...
****************************************************
 
It also seems to me that if the user is not knowledgeable enough to properly
configure zone alarm or similar firewalls (and the instructions to do so0
could be a lot clearer), that user is probably also not knowledgeable enough
to prevent trojans and spyware. Sort of a catch 22 but one that underlines
the need to use a firewall that controls outbound traffic.

I do not have SP2 yet, but I thought the rumor was that it would include an
outbound firewall too. I guess I was misinformed and it does not from these
messages.

--

Jeff McPherson
Email address deliberately false to avoid spam
(e-mail address removed)
Outgoing mail is certified Virus Free by AVG
 
Back
Top