Security Application Settings

Introduction

Here are some of my security software (antivirus, firewalls, spyware scanners, etc.) settings. See also: Linux Firewall Settings, Programs, Operating Systems, Software.

Avira AntiVir Personal 10 (Windows 7)

Extras

Configuration

[x] Expert mode

Scanner

(General)

[x] Scan boot sectors of selected drives

[x] Scan master boot sectors

[x] Scan registry

ZoneAlarm Free Firewall 11 (Windows 7)

Main Window

Firewall

Basic Firewall

Settings

Public Zone: High

Trusted Zone: High (I'm not sharing any printers or files)

Advanced Settings

[ ] Block all fragments

[ ] Block trusted servers

[ ] Block public servers

[ ] Enable ARP protection

[x] Filter IP traffic over 1394

[x] Allow VPN protocols

[x] Allow uncommon protocols at high security

[ ] Lock hosts file

[x] Disable Windows Firewall

(*) Ask which Zone to place new networks in upon detection.

[x] Automatically put new unprotected wireless networks (WEP or WPA) in the Public Zone

[x] Enable IPv6 networking

Application Control

Settings

[Screening]

Min. = Network firewall screens some programs.

"You will not be protected from some zero-day threats."

(I can't leave my computer alone so it can update programs if I use the "Max." setting, because I have to constantly accept connections. If I already have a virus it might change the firewall settings.)

[DefenseNet]

Off = Your DefenseNet is set to Off.

"You will not receive security SmartDefense Advisor."

OLDER VERSIONS (ARCHIVE)

Avira AntiVir Personal 10 (Windows XP) (Year 2011)

Extras

Configuration

[x] Expert mode

Scanner

(General)

[x] Scan boot sectors of selected drives

[x] Scan master boot sectors

[x] Scan registry

Action on Detection

(*) Interactive

Archives

[x] Scan archives

[x] Smart Extensions

Heuristic

[x] Macrovirus heuristic

[x] enable AHeAD (Advanced Heuristic Analysis and Detection)

Update

(General)

[x] Activate

[x] Repeat job if time has expired

General

Threat categories

[x] Adware

[x] Adware/spyware

[x] Application

[x] Back-door client

[x] Dialer

[x] Double-extension files

[x] Fraudulent software

[x] Games

[x] Jokes

[x] Phishing

[x] Programs that violate the private domain

[x] Unusual runtime compression

ZoneAlarm Free Firewall 10 (Windows 7)

Home Button

Computer Box/Tab

Basic Firewall: On

Settings

Public Zone: High

Trusted Zone: High (I'm not sharing any printers or files)

Advanced Settings

[ ] Block all fragments

[ ] Block trusted servers

[ ] Block public servers

[ ] Enable ARP protection

[x] Filter IP traffic over 1394

[x] Allow VPN protocols

[ ] Allow uncommon protocols at high security

[ ] Lock hosts file

[x] Disable Windows Firewall

(*) Ask which Zone to place new networks in upon detection.

[x] Automatically put new unprotected wireless networks (WEP or WPA) in the Public Zone

[x] Enable IPv6 networking

Anti-virus & Anti-spyware: Off

Application Control: On

Settings

Max. = Network firewall screens all programs (creates alerts for new/changed software)

"Most secure, but creates the most alerts." (doesn't create too many alerts in my opinion)

Manual = Your DefenseNet is set to Manual

"You will receive security SmartDefense Advisor to help you respond to program alerts."

PC Tune-Up: Off

Internet Box/Tab

Anti-phishing: On (this is the browser plugin)

Browser Virtualization: Off

Anti-spam: Off

Parental Controls: Off

Identity & Data Box/Tab

Identity Protection: Off

DataLock Hard Drive Encryption: Off

Online Backup: Off

ZoneAlarm Free Firewall 9 (Windows XP)

Overview

Preferences

Check for Updates

Check for product updates: (*) Automatically

General

[x] Load ZoneAlarm at startup

[x] Protect the ZoneAlarm client

Contact with ZoneAlarm

Whenever I request info from ZoneAlarm

[ ] Alert me with a pop-up before I make contact ("Displays a warning before contacting ZoneAlarm to deliver registration information, get product updates, research an alert, or access DNS to look up IP addresses.")

[ ] Hide my IP address when applicable

[x] Hide the last octet of my IP address when applicable

Firewall

Main

Internet Zone Security: High

Trusted Zone Security: High (I'm not sharing any printers or files)

Advanced Settings

[ ] Block Trusted Zone servers

[ ] Block Internet Zone servers

[ ] Allow uncommon protocols at high security

[ ] Allow Outgoing DNS/DHCP in Trusted Zone on High setting

[ ] Allow Outgoing DNS/DHCP in Internet Zone on High setting

[ ] Lock host file

[x] Disable Windows Firewall

[x] Filter IP traffic over 1394

Program Control

(*) Medium (creates alerts for new/changed software)

( ) Low ("Program control is in learning mode.")

SmartDefense Advisor

(*) Manual ("You will receive security advice from SmartDefense Advisor to help you respond to Program alerts.")

( ) Automatic ("SmartDefense Advisor will configure program access whenever advice is available.")

Advanced

[x] Allow certified Microsoft programs to run automatically

Automatic Lock

(*) Off (I might leave my PC to download something and lock the PC until I'm back, so no thanks)

Custom

Lock Mode to Use When Enabled

(*) Lock when screensaver activates

When Lock Engages

(*) Allow pass-lock programs to access the Internet (you may need an additional locking program to lock programs)

Alerts & Logs

Main

Alert Events Shown

(*) Off ("Do not show any informational alerts. (Program alerts will still be displayed.)")

Last modified: June 28th, 2014

Author: Tomi Häsä (tomi.hasa@gmail.com)

URL: http://sites.google.com/site/tomihasa/security-application-settings