windows 2000 server and Zonealarm together

[runboy]

I would like to hear if anybody uses this combination and if they have had any poblems with it. I would like to use zonealarm on my webserver (win2kserver)

 

[realcoffee]

If I remember correctly zonealarm does not work with w2ks. Go to thier site to make sure though.

 

[kyoshozx]

I had zonealarm and it worked with win2k fine before i installed the service patch. After the service patch zone alarm would not function correctly. Either I couldn't access the internet at all or I would get the blue screen. I tried later with a newer version of zone alarm and had the same problem. I believe the newest version I tried was released in November so if they have a newer version maybe it's compatible.

 

[Jal]

I'm using ZA on Win2KPro and everything is fine

 

[jaywallen]

You'll want the Pro version of ZoneAlarm. Don't recall what I paid for it, $20 I think. Works like a charm for a simple webserver application, though, if your needs are more complex you may have to move up to a more robust firewall solution to deal with some types of intrusion issues.

Regards,
Jim

 

[runboy]

I know ZoneALarm doesn't have any problems with W2K Pro. It is the server that is the problem. Any success stories ?

 

[jaywallen]

Sorry that I didn't make that more clear. I know three guys who are using ZoneAlarm Pro on commercial W2K web servers. I haven't seen how they actually have them set up, but it can't really be all that complicated with ZoneAlarm Pro. They all seem happy with it, and one of them is not using ANYTHING ELSE. (That would make me nervous, but it's his rig.) If you're looking for precise information about setup, I can try to put them in touch with you. AFAIK, they just installed it and answered the program's questions about what gets access, what gets to be a server, etc. The ZoneLabs Web site support information is pretty decent, too, and their tech support actually answers emails -- intelligently. (Heck, even on the freeware version!)

Regards,
Jim

 

[runboy]

I just found out it doesn't support multi CPU platforms and my win 2k server has 2 x PIII800EB so it probably wouldn't be a good option for me.
Any other good firewalls that support dual processors ?

 

[jaywallen]

Oops! Sorry, runboy. And I knew that, too. Friend Brenda has ZoneAlarm Pro running on a dual processory HP server in single processor mode.

I'm not used to thinking in terms of using firewall software on an NT server but, rather, using a separate box. Is that an option? If this server has to BE the firewall, then I don't know what else to suggest. Obviously there are a lot lof products out there in this category, but I'm used to thinking in terms of a separate box (BSD, Solaris, whatever) being used as the firewall. The ZoneAlarm Pro instances I was aware of were (are) "shoestring" operations where the server is a Web server which is administered directly. Everything in one box, but not running a corporate LAN. Obviously not highly secure, although I'd suppose that ZoneAlarm Pro plus the router gives them pretty fair protection.

I will follow this thread with interest. Hope something turns up, but I know of nothing easy to suggest at this point.

Regards,
Jim

 

[runboy]

If they run it in single processor mode, do they get any benefit out of the other processor ? It seems like a waste

 

[ALstonLoong]

HI runboy .
May i know for win2k server do you need other external software to link your pcs? like...sygate , ics ..... or you just use win2kserver ?

alston

 

[runboy]

It is a stand alone machine just used as webserver.

 

[jaywallen]

You're right, runboy. It's a waste of the second processor. But, like I said before, it's a shoestring operation. They blew everything they had on a server, then, when they ran out of money, they just patched together what they could to work on it for now. Not the way to go if you can avoid it.

Regards,
Jim

 

[runboy]

What about black Ice defender. Does that product support miltiple processors ?

 

[Panther505]

I am runnning Black Ice on a W2K server with duals.. I have not had many problems(mostly user level issues-me) If you have any questions let me know specificaly and I will see if I can answer them

 

[runboy]

Yes, I do have a couple of questions:

1. Have you used it with Terminal Server remote admin, and if so were there any problems.

2. I want to allow webbrowsing, FTP, & SMTP(mail sent from website) + admin via TC. Is that fairly easy to configure ?

3. Can Black Ice Defender also restrict local programs from calling home to their vendors ?
ZoneAlarm was pretty good in that respect. It is funny to see how many programs likes to call home to their mommy whenever they see an open Internet connection. I guess vendors use it to check if anybody are using their software illegally so they can nail them. I just don't like the idea of having stuff I don't know about sent over the net.

 

[syf3r]

blackice does work on dual-processor machines, however, it will not prevent apps (or trojan horses, for that matter) from calling out of your machine. blackice only prevents unauthorized attempts to get into the machine.

syf3r.

 

[Panther505]

runboy,

syf3r is completely correct.BID does not monitor outbound packets. I am not generally concerned about outbound as I am running my server as a web/ftp server and a Router for my home LAN.. I do not install any apps that I am not sure sure about and I have BID look at the Lan network and block all but the FTP/Http and any other ports that are specific to completing tasks. If I try something and I cannot get out I PC anywhere to my server and look to see what BID sees...

I have not tried TS or TS remote... I am thinking of trying it so that I can getr rid of PC anywhere... I do use the remote config of IIS and configuring it is not that difficult. Let me know if you want any more help

 

[ALstonLoong]

my i know TS remote can do wake on lan ? Can you provide me a link to this software ?

alston

 

[syf3r]

a good alternative to pc anywhere is VNC remote administration client... also remotely anywhere, which has a very small footprint (as opposed to pcanywhere) but is kind of hungry for cpu-cycles while it runs...

-syf3r.

 

[runboy]

I can highly recommend Terminal Servers admin module. Some of the reasons:

1. It is totally integrated/comes with the OS (win2000server). It is important to note here that with win 2k TC is note quite the same as with NT. Win2kserver has a special Admin TC.

2.It doesn't take any ressources when you are not connected and when you are connected it takes the same amount as the console would (Can't beat that).

3.You can use up to 128bit encryption for your datatransfer. Including sending your username & Password.

It is THE way to connect to Win 2k Server

 

[Panther505]

What do I have to do to install and how do I use it???? Pointer would be nice or send me a PM and we can take it off line

 

[runboy]

Open Windows Components wizard. Then select Terminal Services (Not Licensing) and press next. Then select Remote Administration (Default) and you are up and running.
You can then configure it and make two disks for the client via the new link in Administrative Tools.