The process responsible is "cefsimple.exe". I would say block it in the firewall, but that is not possible. This is a little concerning, since malware could use it against ZA, by using some vulnerability and faking a process under its name, which would allow it to run and access internet. It is a slim chance, but still possible.
Anyway, you could try removing the whole cef folder, but ZA would probably just restore it. You should try it as the first safe option.
Code:
takeown /f "%ProgramFiles%\CheckPoint\ZoneAlarm\cef" /a /r /d y
icacls "%ProgramFiles%\CheckPoint\ZoneAlarm\cef" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c
rd "%ProgramFiles%\CheckPoint\ZoneAlarm\cef" /s /q
Denying exe to run should work as well. It is not an essential process, so there should be no issues. Note, that if ZA will be updating, an update might fail, because it will not be able to access it, in that case reset the permissions, update and block it again. There might be other long term issues, if ZA keeps trying to run it.
Code:
takeown /f "%ProgramFiles%\CheckPoint\ZoneAlarm\cef\cefsimple.exe" /a
icacls "%ProgramFiles%\CheckPoint\ZoneAlarm\cef\cefsimple.exe" /inheritance:r /remove "Administrators" "Authenticated Users" "Users" "System"
Code:
icacls "%ProgramFiles%\CheckPoint\ZoneAlarm\cef\cefsimple.exe" /reset