ZoneAlarm Security Suite

By PseudoRandomDragon
in Member Reviews

 Share

Recommended Posts

Grand Master

PseudoRandomDragon

Posted
Posted

ZoneAlarm Security Suite v5 is the newest ZoneAlarm ZoneLabs has created. All the features that come with ZoneAlarm Pro, along with web filtering, IM Security and virus scanning have been integrated into this suite. But do the new features deliver more security, or is it just a waste of resources?

Installation:

Will go without a hitch as long as the system is clean to begin with and there are no conflicting software (like other software firewalls). If upgrading from an old version, your settings will be kept, unless you are upgrading from a *really* old version or had corrupt settings to begin with. Upon installation, you will be greated with a nice wizard to setup the very basic elements of the firewall, then given the option of a tutorial. When done, you must restart and proceed to setting up the firewall. While the nice wizard tells us we are done with configuration, that is hardly the case. A user can choose to just stick with answering prompts about programs, but why not take full advantage of the firewall that cost $70? A user opening up ZoneAlarm will quickly find there is a lot more too it than just a wizard.

Firewall:

ZoneLabs has always been noted for the robustness in firewall software, featuring strong and intelligent stateful packet inspection. While the workings of the firewall itself are unknown to me, I can confidently say that I have yet to be hacked. It is certainly enough to stop worms like MSBlaster. The interface for setting computers to the trusted zone is easy, but setting up ICS or manually opening ports will require a bit of knowledge, some use from the help file or a friend who knows. Expert rules provide a great medium for the more advanced of users to take more control over their connection, from opening ports for only a specific range of IP addresses to opening ports to closing internet access at specific times.

Program Control:

A program may be allowed or denied access by giving checks or X's, but even that may be too hard for some users, as there are programs like Generic Host Processes for Win32 services and Services and Controller App that need access, but wtf are they? To fix that problem, the alertadvisor can give advice on program access right in the prompt, or automatically give access to known trusted programs. This prevents people from foolishly giving GHP server rights, or blocking it completely and getting annoyed because internet won't work.

While users may not touch the other aspects of program control, there is still much that can be configured to increase security. Openprocess control to prevent abuse of the openprocess function and advanced program control to keep a program from gaining access by using another program. There is also component control to help you keep track of changed components to prevent the action of a trojan gaining access by replacing components of an allowed program. While all this extra security is nice, it takes someone with time and patience to configure it all, else there will be many prompts about advanced program control, or a program trying to load new components.

AntiVirus:

ZoneAlarm Security Suite uses the VET antivirus engine provided by Computer Associates. It comes with all the standard stuff you would expect from a virus scanner. Real time protection and the like. While it may be able to stand up to Norton, it just can't compare with AVG or Avast. It simply lacks the features and the database to compare. And spyware? Pfft, forget it.

Email Protection:

This basically works by blocking certain file attachments that can be dangerous and giving a warning prompt about said attachment. To quarantine the file, ZoneAlarm changes the file extention depending on what the origonal one was. There is also outbound email protection to limit how many emails can be sent out in a unit of time. My only complaint is that it should support more email clients.

Privacy:

Popups are annoying, ads stink and mobile code (ActiveX, scripts) can install spyware on your computer. This can all be managed/blocked in this tab. THe privacy tab also has a site list so that you may allow stuff for the sites you trust. There is also a cache cleaner. The cache cleaner isn't as good as Window washer, but it is good enough in my opinion. Certainly beats having to clean all that stuff manually, or buy a seperate program. It will work with any browser, but firefox users need to turn it on manually. Yep, that is what you get for having it at 0.x

ID Lock:

A somewhat useless feature, you can store stuff like your name, PIN number, credit card number, address, diameter of your left testicle and phone number in a "vault". If a program tries to send out what is in the vault, it will be replaced by astriks ******. You can set sites that you trust with this information. One-way encryption also exists, which prevents someone from getting that info from ZoneAlarm itself. I consider it useless because there isn't very much to bypassing it. Encrypting the connection, or putting spaces inbetween the data is all that is really needed.

Web Filtering:

This feature is provided by a third party. A basic web filter program, it will block bad web pages and replace it with a "web filter violation omfg" page. It also has an automatic update thing. Pretty good job of blocking, but there is no way to edit the list of blocked pages, you can only allow/disallow content of certain catagories.

IM Security:

A nice tool for parents, but I don't see much other use of it other than the supposed vulnerability protection and encryption. This supports any client that uses the AOL/ICQ/MSN/Yahoo! protocols, so even programs like GAIM are protected. You can prevent audio/video/file for those clients as well as block HTML tags and active content if so desired. This is nearly useless though, most of that can be configured to off in the clients themselves, but I guess it is good for a parent/business owner to keep control (so long as a password is set ). The encryption idea is OK, but I would definately like to see it support encryption by other programs that encrypt IM programs.

Support:

email can be hit or miss. They may respond to you in three days, maybe a week, maybe not at all! Phone tech support costs money (so forget that). Their forum system seems to be the most effective, and ironically the people giving help don't get paid. Sadly, they are unofficial, so they dont' know what is actually going on at ZoneLabs HQ. The help file is OK, but one cannot learn a program by help files alone.

Bugs/stability:

Bugs plague ZoneAlarm, but none more than with version 5 of pretty much their entire ZoneAlarm line. A wide range of problems croped up with version 5. Problems with P2P and games, disabled Norton email scanner, IIS/apache problems, chkdsk gets disabled, the list goes on. Some have been fixed already, others will be fixed in the future. However, it is quite clear that ZoneLabs needs more beta testers and a better testing department, as well as a good ear for problems.

Rating:

I give it eight stars. It is a great security product, but it's major problem is the bugs which are far too many in version 5 and just plain don't get fixed fast enough. If security suites aren't your thing, stick with ZoneAlarm/ZoneAlarm Pro.

Trial versions for all ZA products

post-104-1090381595.jpg

Link to comment
https://www.neowin.net/forum/topic/192959-zonealarm-security-suite/
Share on other sites
Mentor

Ruciz

Posted
Posted

I believe it is a decent product for the average user. I don't think its possible to have a decent sized program with all features incorporated into it, but ZoneLabs are heading in the right direction with this product. Its only version 5 anyway, most companies don't get their product rolling until Version 7 or 8 (norton on version 11 now?)

Grand Master

PseudoRandomDragon

Posted
  • Author
Posted

I liked the change in interface, but it just didn't feel 1337 anymore. I think it is because of the tabs and the fact that it was so compact. Unfortunately you can't fit all the settings you can make for it in those little tabs. So, they changed it to side buttons and tabs.

I also remember grc.com raving about how it checks the program path for each program to make sure it wasn't replaced by a trojan. Wow the ultimate in firewall technology :o It checks the whole program path :o :o The funny thing is, that page is still there. Steve hasn't updated it. :p

Grand Master

cork1958

Posted
Posted

Same here, almost. I didn't even bother to upgrade to version 5 after reading all the complaints about it. Had been using ZA since way back at 2.6. Hate companies that bundle crap. ZA is a firewall. They were very good at that. Not at AV.

It's now Kaspersky Anti Hacker and Kaspersky AV for me.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.