Security Basics: RE: Remotely manage Zone Alarm

["Aditya" <adityald3 () gmx net>]

zone alarm log files are just text files which are seperated by commas makes it possible to write a simple perl script 
or vc++ program that will do the same for you - the program can check if there is a net connection and  if present just 
mail you the log file - all of them or only the entries that u want !

contact me off list if u want me to write such a program - maybe u can use it on all you win32 clients and bulid a 
certral server for keeping tabs of what is happening in you enterprise...

Aditya Lalit Deshmukh
Enterprise Security Solutions
aditya () online nailed org 


-----Original Message-----
From: Cesar Diaz [mailto:cesadiz () yahoo com]
Sent: Thursday, September 04, 2003 7:06 PM
To: security-basics () securityfocus com
Subject: Remotely manage Zone Alarm




We have a user that works remotely.  Since he works outside our 

firewall he has Zone Alarm Pro on his machine.

 

This week he is in the office.  Our logs show he is trying to access 

things he shouldn't be and doing things he shouldn't be.  For internal 

political reasons HR wants some more proof that it's not accidental.  I 

can't access his c$ share to look at Zone Alarm logs or remotely access 

his event logs because of the Zone Alarm

 

Is there a way to centrally manage Zone Alarm settings or is this user 

completely shielded while inside our network?

 

Cesar




---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------


________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event.  Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------