There have been several different approaches - from allowing outgoing http (80) and https (443) in either the Custum of the Firewall or in the Expert of the Firewall.
The MS update concerning the randomization of outgoing connection fron the local ports to the remote port 53 of the DNS server is the main issue.
I suppose the expert rule for ANY source port to remote 53 with the dns servers should solve the issue.
I have just uninstalled the ZA, installed the updates and did a new installation of the ZA and got on the internet.
As of yet I have had not any time to adjust or adopt expert rules for myself - I will do this later tonight or tomorrow. Tommorrow, I promise I will post a sticky post in the Access forum for all to see exactly what was discovered and how the rules look like exactly.
I will start all of this later today (what is left of it), but for the time being, I have to help people on the forum.
But here is a solution I have been posting in various threads:
Either uninstall the MS updates KB951748 and KB951698 (in the Control Panel's Add and Remove Programs and check the "Show updates" box) or set the ZA's Internet Security slider to Medium<hr>
It is more secure to use the Internet Security slider at the High level not at the Medium level.
Or use the High and create specific rules will work as well with the latest MS updates.
If you wish to retain the MS updates and use the Internet Security slider at High (the default and correct setting), then do an uninstall of the ZA, after the required re-boot then manually remove the files found inside of these folders:
[*]WINDOWS\ Internet Logs folder[*]Program Files\Zone Labs folder[*]WINDOWS\system32\ Zonelabs folder[*] any files in the Windows\Temp folder[*] and any files found in the Temp folders found in the Document and Settings[*]empty the Recycle Bin
Then re-install the ZA.
This method has been successful with the older ZA 5.5.094.000 and with the latest MS updated all installed, on a windows xp he sp3.