Re: Remotely manage Zone Alarm

["small fry" <frysmall2000 () hotmail com>]

As a future consideration (and depending on your network infrastructure 
etc.), ZoneLabs have produced ZAP-Integrity Server.  This allows you to 
centrally manage all ZoneAlarmPro installations and also force policies 
(i.e. what ports, programs are allowed), all logs are also centrally 
managed,  the system also allows you to control Anti-virus updates (only 
certain one's though I believe).
Bare in mind though, as previously stated, monitoring or even investigating 
employees there are many implications (depending on which country you live 
in). e.g. The RIP Act 2000 in the UK.

> From: Cesar Diaz <cesadiz () yahoo com>
> To: security-basics () securityfocus com
> Subject: Remotely manage Zone Alarm
> Date: 4 Sep 2003 13:36:00 -0000
>
>
>
> We have a user that works remotely.  Since he works outside our
> firewall he has Zone Alarm Pro on his machine.
>
> This week he is in the office.  Our logs show he is trying to access
> things he shouldn't be and doing things he shouldn't be.  For internal
> political reasons HR wants some more proof that it's not accidental.  I
> can't access his c$ share to look at Zone Alarm logs or remotely access
> his event logs because of the Zone Alarm
>
> Is there a way to centrally manage Zone Alarm settings or is this user
> completely shielded while inside our network?
>
> Cesar
>
>
> ---------------------------------------------------------------------------
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
> October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> technical IT security event.  Modeled after the famous Black Hat event in
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> Symantec is the Diamond sponsor.  Early-bird registration ends September 
> 6.Visit us: www.blackhat.com
> ----------------------------------------------------------------------------

_________________________________________________________________
Sign-up for a FREE BT Broadband connection today! 
http://www.msn.co.uk/specials/btbroadband


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------