Recommended Posts

I installed Zonealarm On ICS (Internet Connection Sharing) Computer, and Set the IP Address to 192.168.0.1. Then I Set the settings on Zonealarm to the 3rd Option (ICS), To allow all the Computers to connect though this computer to connect to the Internet.

Then, My other computers I would set as Different IP Address, (No Conflicts), and I Installed Zonealarm on them Computers aswell, and Set the option to connect to a ICS Computer using Zonealarm.

Then I got to Internet Explorer to check if its got Internet Access and it works for about 10mins, then after awhile is says cannot connect, after browsing though the webfor about 10mins

Before Installed Zonealarm I was using Windows XP Default Firewall and the Internet worked fine with that, No Problems, But With Zonealarm it keeps Getting Unable To Connect in Internet Explorer.

Also, I have tried Differnet Browser, For Example BT Yahoo Browser, Firefox, Aero Browser, No Luck. I have also used Ad Aware and Spy Sweaper to remove the Trojens, Also updated My AntiVirus Programe and Did a Full Scan, Nothing Found.

I Can still see Other Computers on the networks, and I can still use Network Drives, even when the internet Cannot Be Connected to the ICS Computer. Also The Internet Still works on the ICS.

ICS Computer

IP -192.168.0.1

Subnet Mask -255.255.255.0

Other Computers

IP - 192.168.0.2

Subnet Mask-255.255.255.0

Getway- 192.168.0.1

Why does this keep Happening

Other Computers

IP - 192.168.0.3

Subnet Mask-255.255.255.0

Getway- 192.168.0.1

Why does this keep Happening

Link to comment
https://www.neowin.net/forum/topic/230331-zonealarm-ics-problem-connecting/
Share on other sites

I've got the Pro version of ZoneAlarm and had a similar problem. Here's the fix from the ZA Help desk:

On the gateway machine, do the following.

Click start -> run, type cmd and click ok.

Type ipconfig /all and press enter.

Find the connection you are using, and make note of all the DNS servers.

Type exit and press enter.

Double-click the ZA icon down by the clock.

Click firewall -> main, and click the advanced button.

Put the check in "this computer is an ICS/NAT gateway"?, and click ok.

Click firewall -> zones.

Add each DNS server to the trusted zone. To do this, do the following.

Click the add button, and then click IP address.

Click trusted, put in the IP address, enter a description, and click ok.

When finished adding all addresses, click the apply button.

Next, click program control -> programs. Locate Generic Host Processing.

Under the server column, for trusted, change that to a check.

Don't change server internet to a check, just server trusted.

If you have ZoneAlarm on the other computers, do the following.

Click the ZA icon down by the clock.

Click firewall -> main, and click the advanced button.

Put the check in "this computer is a client of an ICS/NAT gateway"?, and click ok.

Please note that this will likely NOT work if you are using the free version of ZoneAlarm. Support for ICS is one of the perks of going to the Pro/pay version according to their web site. Older versions I believe will do it for the freeware versions. If that's your situation I'd Google it and try to find an older version somewhere.

Happy landings!

Edited by Salgoth

Thx M8, I will give it ago.

Also, I Play alot of Online Games, So if I open a Range of ports or a port to the ICS Computer on the ICS Firewall, will that open the port for the whole network that is connecting to the ics for the internet?

Thx M8, I will give it ago.

Also, I Play alot of Online Games, So if I open a Range of ports or a port to the ICS Computer on the ICS Firewall,  will that open the port for the whole network that is connecting to the ics for the internet?

584731754[/snapback]

To be honest I'm not sure. I'm running ZA 5.1.033 right now. If you go to Program Control you should be able to grant access to your games programs from there regardless of the specific ports needed. Access is program based, not port based.

Otherwise, you can do a lot with ports in Expert Rules so that's where I'd go if granting access via the programs route doesn't work.

I stopped using zone alarm becuase i would enable ICS\NAT and when i restarted it whould in tick it. I'm using Bit Defeneder Pro 8 now. Fast and effective

584731875[/snapback]

Troll :) He didnt ask what alternate firewall software shud be used! He asked how 2 solve the problem :huh:

  • 1 year later...

I've got the Pro version of ZoneAlarm and had a similar problem. Here's the fix from the ZA Help desk:

On the gateway machine, do the following.

Click start -> run, type cmd and click ok.

Type ipconfig /all and press enter.

Find the connection you are using, and make note of all the DNS servers.

Type exit and press enter.

Double-click the ZA icon down by the clock.

Click firewall -> main, and click the advanced button.

Put the check in "this computer is an ICS/NAT gateway"?, and click ok.

Click firewall -> zones.

Add each DNS server to the trusted zone. To do this, do the following.

Click the add button, and then click IP address.

Click trusted, put in the IP address, enter a description, and click ok.

When finished adding all addresses, click the apply button.

Next, click program control -> programs. Locate Generic Host Processing.

Under the server column, for trusted, change that to a check.

Don't change server internet to a check, just server trusted.

If you have ZoneAlarm on the other computers, do the following.

Click the ZA icon down by the clock.

Click firewall -> main, and click the advanced button.

Put the check in "this computer is a client of an ICS/NAT gateway"?, and click ok.

Please note that this will likely NOT work if you are using the free version of ZoneAlarm. Support for ICS is one of the perks of going to the Pro/pay version according to their web site. Older versions I believe will do it for the freeware versions. If that's your situation I'd Google it and try to find an older version somewhere.

Happy landings!

You are the man! Thanks a lot, this works great even with my USB modem.

Yes I Can Connec to the ICS Computer, but I cant get Internet Access

I'm curious, why the ZoneAlarm on each machine? I personally have never used ZoneAlarm, but I would think that since they are using your main PC as the gateway, and it has a firewall that is working aren't you doubling your efforts? Maybe I am totally wrong...personally I would remove it from the client computers and see what happens. See if your internet lasts longer than 10 minutes after you remove/disable ZA?

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Just pull a 4Chan and ignore the UK gov, or better troll them. It's not like they can enforce the fine across border.
    • It has NEVER been shown that all these overreaching creepy methods of surveillance have ever saved a child or prevented a terrorist attack. Not a single one. It's the kind of people like you who just wave it away as "paranoid conspiracy" that makes big tech and governments this creepy mass data hoarding entities. Not only that, 3/4 of these surveillance ideas undermine the very foundations of safe online communication because they always want to have a backdoor in everything "just in case" they might need it to... checks the notes "save the children". If you put a backdoor into encryption chain there is no encryption chain anymore. You know what encryption keeps safe? Your medical records, your online shopping and credit card during payment, your photos in the cloud, your emails, your passwords, everything. There is ZERO guarantee only the good guys will use it. And if you think police suddenly can't apprehend child abusers because of encryption, Epstein was running his entire sex trafficking ring using GMail which is not even encrypted end to end. Or to make matters even worse, USA has a **** and a good buddy of Epstein as a president. Absolutely NOTHING has been done to address it. Maxwell just got a better "hotel" room as a reward. This clearly shows how they absolutely don't really care about the children but they care about the absolute control over all of us. And you're defending them here. Good grief. On top of constant attempts to insert backdoors into encryption chain, the entire age verification nonsense is again entirely over reaching, creepy, invades everyone's privacy with premise of yet again "protecting the children" instead of demanding device makers to provide simple and powerful tools for PARENTS to control how their children use devices and what they do on them. THIS would be the way, not the stupid age verification for everyone. Imagine if government would be dictating companies how their phones work and not the company's IT department. The parents should be the IT department to their children. And for everyone excusing "they are not knowledgeable enough" buuuuuulsheat. We live in a digital age, if you have children now, you absolutely are well versed in digital everything at least to basic extent. If you're not, how do you even function in these times then? Reality is that parents are just lazy and don't want to deal with this. They want government to raise their kids because they are too busy scrolling stupid Instagram and Tiktok or some bs.
    • You could make the argument that K should not be included, but FC, the fried chicken, is not the framework, it's the product. It's the Paint in Paint.NET. A closer analogy is if KFC included the name of the deep fryer they used. HennyPennyFC.
    • Flying as the central point eh... As a massive Spyro fan who has replayed the Reignited Trilogy three times and the originals 4 times... I have some doubts, but maybe...
    • Apple is expanding Private Cloud Compute beyond its own data centers by Pradeep Viswanathan At WWDC 2026, as part of the improved Apple Intelligence capabilities, Apple today announced that it is expanding Private Cloud Compute (PCC), its privacy-focused cloud infrastructure for Apple Intelligence, beyond its own data centers for the first time. Private Cloud Compute was designed to handle Apple Intelligence requests that are too complex to run fully on-device. The PCC system does not store user data and does not allow Apple or anyone else to access user requests. Last year, Apple also expanded its Security Bounty program with rewards of up to $1 million for researchers who could find serious vulnerabilities in PCC. Until now, Apple's PCC data centers were using Apple's own silicon. As part of the expansion, Apple is working with Google and NVIDIA to run new Apple Intelligence workloads on Google Cloud systems powered by NVIDIA GPUs. Apple will be using this new infrastructure to execute more demanding AI tasks while maintaining the same privacy and security guarantees of PCC. The new implementation uses NVIDIA Confidential Computing with NVIDIA GPUs, Intel CPUs with TDX, and Google’s Titan chip. Apple says it has worked with Google to build additional protections beyond a traditional confidential computing deployment. Despite the expansion to third-party data centers, Apple claims that its core PCC requirements remain unchanged, including stateless computation, no privileged runtime access, non-targetability, and verifiable transparency. The company highlighted that it will continue to control the PCC software stack, and Apple devices will only trust PCC software that has been cryptographically approved by Apple. To take security to the next level, Apple mentioned that it is maintaining an append-only ledger of Google Cloud hardware that is part of the PCC fleet. The company claims this will help reduce the risk of supply chain attacks. In addition to AI infrastructure, Apple also worked with Google to use technologies behind the Gemini family of models to build the next generation of Apple Foundation Models to power Apple Intelligence features across on-device and cloud workloads. As expected, for more demanding AI tasks like agentic tool use and complex reasoning, Apple will rely on the expanded PCC infrastructure running on Google Cloud. The expansion of PCC on Google Cloud will gradually ramp toward the full set of protections during the summer preview period. As before, Apple will also publish binaries for public inspection, provide research tooling, and give researchers access to live PCC nodes in research mode through the Apple Security Bounty Program.
  • Recent Achievements

    • Very Popular
      Captain_Eric earned a badge
      Very Popular
    • One Month Later
      amusc earned a badge
      One Month Later
    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
  • Popular Contributors

    1. 1
      +primortal
      506
    2. 2
      PsYcHoKiLLa
      222
    3. 3
      ATLien_0
      92
    4. 4
      +Edouard
      86
    5. 5
      Steven P.
      81
  • Tell a friend

    Love Neowin? Tell a friend!