Zonealarm + router firewall?
I just added a microsoft router/switch to my home network. (had just a hub before) Anyway, I like the hardware firewall, but I reinstalled zonealarm on each pc because I like the alerts to outbound traffic (in case of trojan etc.) First of all, is this okay to do? Secondly, I've noticed that every so often I get repeated zonealarm alerts coming from the router trying to connect to port 5000 and generic host process w32. The ZA info page says it is most likely either a trojan port scan or scan for UPnP. I am assuming that because it is coming from the router/gateway and it happens repeatedly (10-20 times in a row every so often) it must be normal?
If it is normal, can I add my router's IP to the trusted zone to eliminate the alerts, or will this also add the internet to the trusted zone as well? Not sure how that works. Thanks!
Re: Zonealarm + router firewall?
Quote:
Originally posted by Hypo_Luxa
Anyway, I like the hardware firewall, but I reinstalled zonealarm on each pc... First of all, is this okay to do?
Yes, it's fine.
Quote:
Originally posted by Hypo_Luxa
Secondly, I've noticed that every so often I get repeated zonealarm alerts coming from the router trying to connect to port 5000 and generic host process w32. The ZA info page says it is most likely either a trojan port scan or scan for UPnP.
Your router shouldn't be forwarding any traffic from the Internet to your computers, so it's most likely a UPnP scan.
Quote:
Originally posted by Hypo_Luxa
can I add my router's IP to the trusted zone to eliminate the alerts, or will this also add the internet to the trusted zone as well? Not sure how that works. Thanks!
So long as you've got your router set up to NOT forward any incoming ports to a computer (which should be its default setting), I'd feel comfortable adding it to your trusted zone. It should be shielding you from any incoming traffic, and then you can use ZoneAlarm strictly to keep tabs on outgoing traffic.
