Understanding Auto-Learn
Auto is the default setting for the first 21 days of using ZoneAlarm security software. ZoneAlarm security software observes and tracks which safe programs you use regularly, so that you are not interrupted with alerts about these programs. After this self-learning period, a message appears asking you whether you would like to continue in Auto learning mode or move Application Control level to Max so that you have maximum outbound protection.
To set the program control level:
- Select Application Control.
- Click the slider and drag it to the desired setting.
Max (for versions with Anti-virus)
High
(for versions without Anti-virus)
|
With this setting, you may see a large number of alerts.
- Programs must ask for Internet access and server rights.
- OSFirewall will monitor for suspicious behaviors, including attempts to get around file system controls by accessing raw disk data.
- Advanced Program control and Application Interaction Control are enabled.
- Service control manager is on if you have enabled it in the Custom program control settings.
- By default, component control is disabled.*
|
Auto
(for versions with Anti-virus)
|
This Auto-Learn mode minimizes alerts by recognizing your frequently used programs and giving them network access without interrupting your work with frequent alerts
- This is the default level for the first 21 days. Most program alerts are suppressed by giving access to programs you frequently use and relying on SmartDefense Advisor to screen programs
- The OSFirewall will also screen some programs.
- Not as secure as the Max or High setting.
|
Medium
(for versions without Anti-virus)
|
This is the default setting.
- Programs must ask for Internet access and server rights.
- OSFirewall will monitor for suspicious behaviors.
- By default, component control is disabled.*
|
Min
(for versions with Anti-virus)
|
- OSFirewall is disabled.
- By default, component control is disabled.*
- Server control and stealth mode are available
|
Low
(for versions without Anti-virus)
|
- OSFirewall is disabled.
- By default, component control is disabled.*
- Server control and stealth mode are not available
|
Off
|
Program control is disabled.
- No programs or components are authenticated or learned.
- No program permissions are enforced.
- All programs are allowed access/server rights.
- All programs are allowed to perform suspicious behavior.
- No program alerts are displayed.
|
* Component control is disabled by default. If you have turned component control on, it will remain enabled as long as program control is set to High, Medium, or Low. For information about component control, including directions for turning it on, see Enabling Component Control.
To limit the number of alerts you see, you can use the following features:
- Use the Auto program control level, which employs the Auto-Learn feature.
- Leave SmartDefense Advisor on the Auto setting, to benefit from automatic program settings.
|
|
Print
