Enabling Component Control

In addition to controlling permissions for all programs on a computer, advanced users may also want to monitor and, if desired, restrict individual components that these programs load (such as DLL files or ActiveX controls). ZoneAlarm security software keeps a list of components (used by allowed programs) that have tried to access the Internet or the local network. Depending on your Application Control and component control settings, ZoneAlarm security software can simply monitor components or it can alert you each time a new component attempts access. This section explains how to enable component control. For details about viewing the Components List and modifying component permissions manually, see Managing program components.

By default, component control is turned off, though ZoneAlarm security software does add components to the Components List. If you enable component control and set Application Control to Medium, component control tracks components but does not restrict their activity. If you then reset Application Control to High, component control grants access to all previously known components but prompts you to allow or deny any components discovered subsequently. For advanced users concerned about component activity, the best practice is to install ZoneAlarm security software on a freshly set up computer, enable component control and set the Application Control level to Medium, and, after ZoneAlarm security software has had a chance to detect all normal components that require access, reset Application Control to High. (For information about the Application Control setting, see Setting the Application Control level.)

To enable component control:

1. Select Application Control.
2. In the Application Control area, click Advanced Settings.

   The Custom Application Control Settings dialog appears.

3. On the Application Control panel, select Enable component control.
4. Click OK.