Results 1 to 9 of 9

Thread: [SOLVED] New Conflicts with Microsoft Update?

  1. #1
    jclarkw Guest

    Default [SOLVED] New Conflicts with Microsoft Update?

    Ever since updating ZA Extreme Secuirty to 9.3.037 (may not have tried this with 9.3.014) on my Windows XP SP3 machine with Internet Explorer 7 (also similar problems with IE8 on another similar computer), I'm having two problems with a MANUAL "Windows Update." (I've always turned Automatic Updates off, preferring manual updates in general.) I have ZAES Browser Security on (of course) and Virtualization Enabled, but I have always updated Windows through an "unprotected browser" from an Administrator account. I also have Program Control/SmartDefense Advisor set to "Auto":

    1) At first I cound not even connect to the Windows Update site. Eventually I traced this problem to ZA's program configuration, which had automatically set "Windows Update" to level III BUT with Internet access OFF?! Manually turning on Internet access for this program appeared to solve the connection problem.

    2) Next I would click the "Custom" button on the Windows Update site, it would appear to search for updates (green bar running across screen), and then I would get a timeout error from Microsoft (error code 0x80072EE2 -- never saw that before either). The only way I could find to prevent this behaviour was to turn Browser Security completely off. (Just turning off virtualization didn't seem to help.)

    Has anyone else had these problems? Is there a more standard (and less cumbersome) work-around? Or am I doing something stupid. -- jclarkw

  2. #2
    jclarkw Guest

    Default ZAES Configuration for Windows Update?

    In ZA Extreme Security 9.3.037 on a Windows XP SP3 system I've recently had to do some trial-and-error tweeking to get manual Windows Updates to work as all. For details please see the following link, which might not have been posted in the correct section:

    http://forums.zonealarm.org/showthre...596#post283596

    Has anyone else seen this problem? Any suggestions? -- jclarkw

  3. #3
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: New Conflicts with Microsoft Update?

    Hi!

    there is no conflict with WU and ZAES as far as I know otherwise this forum would be flooded by messages. Moreover MS signed files are automatically allowed in ZA latest version regardless of the ZA program control settings.

    If it is a ZA issue then it could just be a bad settings or a corrupted ZA database.

    Try to reset the ZA settings:

    1.) Hold down the Ctrl and Shift keys together
    2.) Right click on the ZA icon near your clock
    3.) Choose 'Reset' from the box that comes up
    4.) Choose Yes on the Reset Settings dialog box
    5.) When prompted, choose OK to restart your system
    6.) Follow the on screen configuration prompts after reboot

    Do not touch any defaults or restore previous backup of your settings.

    Alternatively you can contact the official ZA technical support and request for an alternative solution (if any). Link to support in my signature.

    Please do not open multiple threats about the same issue. There is no configuration needed for WU to work, it works out of the box.
    Last edited by fax; September 21st, 2010 at 08:00 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  4. #4
    jclarkw Guest

    Default Re: New Conflicts with Microsoft Update?

    Thanks, Fax. Sorry about the duplicate thread -- I tried to delete it when I saw it bounced out of the "configuration" section, but apparently I didn't succeed. I will try your suggestions.

    I admit, however, to an insatiable desire to tweek settings. The main things I always change are to turn on browser virtualization and to turn off automatic updates and scans -- I prefer to do all of that manually, especially since I use "Internet Lock" whenever I'm away from the computer. I never fiddle with the "expert" settings, however (unless you consider granting Generic Host Processes and Spooler Subsystem "Passlock" privilages, so that I can maintain my DHCP assignment and print to my LAN printer through "Internet Lock," to be in that category).

    One ongoing uncertainty for me is whether, during a new ZA installation when it tells you to make sure you have an Internet connection before it scans to "set up your programs," you are actually protected by the firewall, AV, etc. Since this has never been made clear on the installation screens, I have always completed the installation with the Internet disconnected and simply declined the option to have my programs set up automatically. Then when ZA is fully installed after the re-boot, I connect the Internet and assign my NAT LAN to the preferred zone (Internet in my case, to prevent assault from other local computers on the LAN). This procedure has never caused me a problem with Windows Update before. And programs seem to get configured automatically as they are used anyhow. Could this paranoid procedure have caused ZA to configure Windows Update without Internet access (as reported previously) or produced some other anomaly related to my problem?

    If you (or some other guru from the cofiguration section) has the patience to talk me out of all this tweeking, so much the better, as long as I can understand what I'm doiing and why. Best Regards. -- jclarkw

  5. #5
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: New Conflicts with Microsoft Update?

    Hi!

    For resets ZA will be active anyway. Just turn ON windows firewall in all other cases (e.g. you have removed ZA and want to reinstall). So just don't change defaults and check that MS updates works as they should. Sometime overdoing it will create more problems then solutions. If you do not trust your LAN be sure to have your DNS and DHCP IPs added to the ZA firewall trusted zone and that the ZA firewall trusted zone is set to MEDIUM and not HIGH.

    Defaults settings with virtualization ON and more frequent AV updates (30 minutes) its all what you need granted your system is kept up to date and free of vulnerable software.

    If you like to customize then please do so but be prepared to troubleshoot issues related to non working programs, loss of connection or general instability. Take note of all the changes and train yourself to foresinc issues that may be related to changes in unrelated areas. The time spent on this is usually not proportional to the incremental security achieved.

    Fax
    Last edited by fax; September 22nd, 2010 at 02:00 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #6
    jclarkw Guest

    Default Re: New Conflicts with Microsoft Update?

    Thanks very much, Fax! Resetting ZA to defaults appears to have solved all of my problems with Windows Update. Your suggestions about optimum settings are also appreciated.

    Do you recommend against using "Internet Lock" when away from the computer? (If I never engage that feature, I also don't have to tamper with "Passlock" options to stay connected and keep my printer working.)

    I assume you also recommend against checking the Firewall/Main/Advanced Settings/"Block Internet Servers" box? (I had been doing this in hopes of preventing rogue programs from listening at the "back door.")

    I have one more question about connecting to the Internet through a telephone modem: What started me down this customization road is that one of my laptops regularly travels between an urban location (with a fast Internet connection through a NAT router, where I am now) and a rural location with only a conventional telephone line. Obviously I cannot leave the comuter connected through my only phone line all the time. Even when it is connected, Windows or virus-signature updates take FOREVER at 48K baud. This (as well as my former use of "Internet Lock") is why I had set all of the ZA and Windows updates to manual in the first place.

    Is there a better solution to the telephone-modem problem, or do I just have to turn all of the update options off or back on whenever I travel between sites? -- jclarkw

  7. #7
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: New Conflicts with Microsoft Update?

    Internet Lock in general? Not really needed. Unsolicited calls are anyway deflated by default and on your dial-up you will hopefully disconnect when not using the PC (that will have the same effect than internet lock).

    Block Internet Servers? No, not really needed or desirable.

    I don't think there is a better solution then turning ON/OFF options while on dial-up. You can use "game mode" default deny to have a less traumatic effect than internet lock and not loosing the connection. Updates will be frozen and unknown outbound calls will be blocked. But you will still need to manage your OS and other programs behavior.

    Again, feel free to play with advance settings but don't be suprised if things don't work as expected (before or later).

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  8. #8
    jclarkw Guest

    Default Re: [SOLVED] New Conflicts with Microsoft Update?

    Thanks Again!

    This is clearly a low-priority question, but... Is there any particular place (on this forum, in a book, or elsewhere) to find a good discussion of tweeking ZAES (or personal firewalls in general) to maximize Internet security under Windows XP (e.g., which system components require what privilages to maintain your Internet connection, which can safely be denied server privilages, etc.)?

    I take your point that the default settings of ZAES are secure, but there are always compromizes in software that must run on a wide variety of systems. Remember the 'good old days" when Steve Gibson advocated turning off Microsoft Networking and using only NetBEUI for file sharing on the LAN? Believe it or not, I'm still doing that with my little XP NAT LAN.)

    Best Regards. -- jclarkw

  9. #9
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: [SOLVED] New Conflicts with Microsoft Update?

    Indeed... things have changed very much as compared to Steve Gibson time. Now security tools are much more invasive, integrated, automated. I am not aware on any ZA guide to improve your security.

    Networks twicks are less and less relevant. The most common driver for infections is the web and not the LAN or the network. You just add a router in front of you and you will be fine even with windows firewall.

    Also consider that the source of infections nowadays are largely coming from legit sites been compromised. So, safe surfing is not anymore enough.

    You find general recommandation here:
    xyz was not detected. What I should do?

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 10
    Last Post: September 18th, 2009, 08:27 PM
  2. Replies: 0
    Last Post: July 19th, 2008, 07:27 PM
  3. Zone Alarm (6.5.700)conflicts with Microsoft Visual Studio 2005 and Visual Studio Express
    By chaos2oo2 in forum General - Questions that don't fit any other category
    Replies: 4
    Last Post: June 21st, 2006, 09:16 AM
  4. Replies: 5
    Last Post: June 15th, 2006, 07:00 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •