Microsoft SNAFU with ZoneAlarm

[Mariner]

Just a quick warning to anybody using ZoneAlarm along with automatic updates on WindowsXP. One of the recent MS security updates KB951748 screws up your internet connection when used in conjunction with current versions of ZoneAlarm.

It has wasted well over an hour of my time locating the source of the problem and fixing it on a couple of PCs so watch out!

Good to see Microsoft are as conscientious with their QA as usual.

Needless to say, I've now cancelled automatic updates on my PCs again.

(Insert lots of swear words about Microsoft...)

 

[Bouncing Zabaglione Bros.]

IIRC, Zonealarm put out an update yesterday, or there was a workaround of resetting your Zonealarm config.

 

[Davros]

i never install updates as soon as they are released

 

[Mariner]

Me neither until recently. Last time I had a problem was with SP1 which didn't initially work with Adobe Type Manager.

I'd fooled myself into believing theiy would have sorted out such silly incompatibilities! That'll learn me.

 

[Mize]

I think you're supposed to use Microsoft's internet security - warranty void if other's installed.

 

[Bouncing Zabaglione Bros.]

It the secret fix MS (and every one else) been working on for months to fix a fundamental security flaw in DNS, so it's a fairly important patch, especially if it becomes a widespread exploit.

 

[Davros]

we get a warranty ?

 

[Mize]

we get a warranty ?

LOL! Of course not. It's software.

 

[hoom]

I work for a small ISP, we got hammered for a couple of days by this.
Fortunately I'd spotted this article on Wednesday night (local) & was able to give diagnosis/fix instructions to the CSRs very quickly the next morning when we started getting calls :smile:

 

[Sc4freak]

Just a quick warning to anybody using ZoneAlarm along with automatic updates on WindowsXP. One of the recent MS security updates KB951748 screws up your internet connection when used in conjunction with current versions of ZoneAlarm.

It has wasted well over an hour of my time locating the source of the problem and fixing it on a couple of PCs so watch out!

Good to see Microsoft are as conscientious with their QA as usual.

Needless to say, I've now cancelled automatic updates on my PCs again.

(Insert lots of swear words about Microsoft...)

This isn't really Microsoft's fault. Microsoft needed to patch a security vulnerability - so of course the security patch changed some core networking code/dlls.

Zonealarm interpreted this as a malicious attack, and shut down your internet in response. So why, exactly, are you blaming Microsoft alone?

 

[hoom]

I guess it depends on if ZA knew about the MS patch beforehand or not.
Could be that ZA wasn't in the know about the whole DNS hole & fix?

 

[Mize]

This isn't really Microsoft's fault. Microsoft needed to patch a security vulnerability - so of course the security patch changed some core networking code/dlls.

Zonealarm interpreted this as a malicious attack, and shut down your internet in response. So why, exactly, are you blaming Microsoft alone?

For fun? Actually both companies did the right thing, it just would have been nice for MS to notify CheckPoint (ZoneAlarm's owner) and send them the patch ahead of release.

 

[hoom]

we got hammered for a couple of days by this

Correction -> Are still getting hammered (in terms of % of calls)

it just would have been nice for MS to notify CheckPoint (ZoneAlarm's owner) and send them the patch ahead of release.

Depends on if Zone Alarm was considered 'safe' to be in the know.
The patch fixes a big DNS hole & all major OSes had near simultaneous patches. Supposedly it was a pretty hush-hush operation with tight security & unprecedented cooperation between OS vendors so it wouldn't surprise me if ZA wasn't allowed to know beforehand.

 

[Mize]

Correction -> Are still getting hammered (in terms of % of calls)

Depends on if Zone Alarm was considered 'safe' to be in the know.
The patch fixes a big DNS hole & all major OSes had near simultaneous patches. Supposedly it was a pretty hush-hush operation with tight security & unprecedented cooperation between OS vendors so it wouldn't surprise me if ZA wasn't allowed to know beforehand.

CheckPoint "guards" more companies than any other AFAIK (VPN-1 being their premiere product). For them to "not be in the know" is absurd.