By now, everyone who is using ZA, knows that Microsoft's update KB951748 broke ZA.
The reason that it broke ZA is that Microsoft had to expand the randomness that the DNS client uses when asking for UDP ports to go to DNS servers.
ZA only looks for these requests in a certain range of UDP ports, but with the new DNS client (note that IE has not changed, but some of the base networking programs (svchost.exe)), ZA sees requests outside of this range and blocks them.
Therefore, Internet is broken.
Unfortunatly, Microsoft didn't tell firewall manufacturers (hardware and software) that they were updating this.
As a note, on one of my computers, I have Norton Internet Security and disabled ZA, and enabled the firewall from Norton until such time as there is an update for ZA.
Operating System:Windows XP Pro
Product Name:ZoneAlarm (Free)