I just added a microsoft router/switch to my home network. (had just a hub before) Anyway, I like the hardware firewall, but I reinstalled zonealarm on each pc because I like the alerts to outbound traffic (in case of trojan etc.) First of all, is this okay to do? Secondly, I've noticed that every so often I get repeated zonealarm alerts coming from the router trying to connect to port 5000 and generic host process w32. The ZA info page says it is most likely either a trojan port scan or scan for UPnP. I am assuming that because it is coming from the router/gateway and it happens repeatedly (10-20 times in a row every so often) it must be normal?
If it is normal, can I add my router's IP to the trusted zone to eliminate the alerts, or will this also add the internet to the trusted zone as well? Not sure how that works. Thanks!