Security Basics mailing list archives
RE: Remotely manage Zone Alarm
From: "Aditya" <adityald3 () gmx net>
Date: Fri, 5 Sep 2003 17:53:38 +0530
zone alarm log files are just text files which are seperated by commas makes it possible to write a simple perl script or vc++ program that will do the same for you - the program can check if there is a net connection and if present just mail you the log file - all of them or only the entries that u want ! contact me off list if u want me to write such a program - maybe u can use it on all you win32 clients and bulid a certral server for keeping tabs of what is happening in you enterprise... Aditya Lalit Deshmukh Enterprise Security Solutions aditya () online nailed org -----Original Message----- From: Cesar Diaz [mailto:cesadiz () yahoo com] Sent: Thursday, September 04, 2003 7:06 PM To: security-basics () securityfocus com Subject: Remotely manage Zone Alarm We have a user that works remotely. Since he works outside our firewall he has Zone Alarm Pro on his machine. This week he is in the office. Our logs show he is trying to access things he shouldn't be and doing things he shouldn't be. For internal political reasons HR wants some more proof that it's not accidental. I can't access his c$ share to look at Zone Alarm logs or remotely access his event logs because of the Zone Alarm Is there a way to centrally manage Zone Alarm settings or is this user completely shielded while inside our network? Cesar --------------------------------------------------------------------------- Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world's premier technical IT security event. Modeled after the famous Black Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors. Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com ---------------------------------------------------------------------------- ________________________________________________________________________ Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com) --------------------------------------------------------------------------- Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world's premier technical IT security event. Modeled after the famous Black Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors. Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com ----------------------------------------------------------------------------
Current thread:
- Remotely manage Zone Alarm Cesar Diaz (Sep 04)
- RE: Remotely manage Zone Alarm Zachary Mutrux (Sep 04)
- Re: Remotely manage Zone Alarm gregh (Sep 04)
- Re: Remotely manage Zone Alarm Birl (Sep 05)
- RE: Remotely manage Zone Alarm Jef Feltman (Sep 08)
- Re: Remotely manage Zone Alarm gregh (Sep 08)
- Re: Remotely manage Zone Alarm Birl (Sep 05)
- RE: Remotely manage Zone Alarm Aditya (Sep 05)
- <Possible follow-ups>
- RE: Remotely manage Zone Alarm Halverson, Chris (Sep 04)
- RE: Remotely manage Zone Alarm Mike Peppard (Sep 04)
- RE: Remotely manage Zone Alarm Jay Woody (Sep 04)
- Re: Remotely manage Zone Alarm Thomas Graf (Sep 04)
- Re: Remotely manage Zone Alarm Birl (Sep 05)
- Question on Corrupted BlackIce Defender Installation Paul Fishbein (Sep 11)
- RE: Question on Corrupted BlackIce Defender Installation matt willson (Sep 15)
- Re: Remotely manage Zone Alarm small fry (Sep 05)
- Re: Remotely manage Zone Alarm Cesar Diaz (Sep 08)