Risky default settings for Firewall notifications

Status
Not open for further replies.

Atlas147

Level 30
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 28, 2014
1,990
Hey all!
So I've noticed that the default notifications settings for the firewall is very limited, it only notifies you when it blocks a certain kind of connection but not others, although it has the ability to notify you, it is disabled by default. Which results in some confusion for the users. Example would be something that happened to me just a few days of using zonealarm. My VPN was being blocked, I couldn't find the source of the problem and zonealarm seemed very silent so I didn't think much of it, what's more was that there was a check box that said allow VPN protocols, and it was checked for me. (which in my mind I thought it meant that it would not block my VPN traffic)

After investigating, I saw that zonealarms had log files of me connecting to my VPN server and was blocking it. Upon further digging I found that there was a setting for notifications to every type of connection blocked by zonealarm.

If the developers would have enabled this in the start I think it would have made it easier for users to understand the software instead of having issues and trying to troubleshoot them themselves.
 

jasonX

Level 9
Apr 13, 2012
421
Some developers do tend to think for the users or make it a point to decide for the users themselves and not let them know of a thing or two. It may have been because a lot of users do not want to get involved or shall I say do not want to give a fuzz about the inner workings especially that of the firewall(and the same goes for alerts and logs). Some do tend to be an "install and leave" individual and this with all that's been studied and taken into account may have been the reason why the developers took it upon themselves that notion -- decide for the user and not bother him (or better yet not inform him -- enjoy the ride we'll do it for you.). Take the case of Emsisoft ending the development of Online Armor because studies have showed that HIPS is not the "in thing" and BB is and because it's better for the user. When issues occurs and like what you discovered there's always the denial and the plain simple Oooops...we'll check it out.
 

aztony

Level 9
Verified
Oct 15, 2013
501
Take the case of Emsisoft ending the development of Online Armor because studies have showed that HIPS is not the "in thing" and BB is and because it's better for the user.
Basically, one of OA's developers said on Wilders the decision to end support for the firewall was based on majority user preference for BB because most of those users did not want to learn, or be bothered, responding to HIPS alerts, and have to make a decision(s).
 
  • Like
Reactions: jasonX

jasonX

Level 9
Apr 13, 2012
421
.....because most of those users did not want to learn, or be bothered, responding to HIPS alerts, and have to make a decision(s).

Exactly! Thanks aztony for the additional info in your reply there. :)
 
H

hjlbx

Hey all!
So I've noticed that the default notifications settings for the firewall is very limited, it only notifies you when it blocks a certain kind of connection but not others, although it has the ability to notify you, it is disabled by default. Which results in some confusion for the users. Example would be something that happened to me just a few days of using zonealarm. My VPN was being blocked, I couldn't find the source of the problem and zonealarm seemed very silent so I didn't think much of it, what's more was that there was a check box that said allow VPN protocols, and it was checked for me. (which in my mind I thought it meant that it would not block my VPN traffic)

After investigating, I saw that zonealarms had log files of me connecting to my VPN server and was blocking it. Upon further digging I found that there was a setting for notifications to every type of connection blocked by zonealarm.

If the developers would have enabled this in the start I think it would have made it easier for users to understand the software instead of having issues and trying to troubleshoot them themselves.

Unfortunately, all the work goes into making the software and very little effort is made to explain how the software works.
 

jasonX

Level 9
Apr 13, 2012
421
Unfortunately, all the work goes into making the software and very little effort is made to explain how the software works.
Agree there. Some devs leave it to themselves. I'd wish more effort was really thrown to explaining how applications work so it will be a good learning process for the user and through that they (user) will love the application more! Two-way interaction between the user and the creators will grow a bond towards loving and appreciating the product even more. Just like here in MT, that constant interaction/sharing/explanation/learning here makes us love the forum even more.
 
  • Like
Reactions: jamescv7
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top