Here are some of my security software (antivirus, firewalls, spyware scanners, etc.) settings. See also: Linux Firewall Settings, Programs, Operating Systems, Software.
Extras
Configuration
[x] Expert mode
Scanner
(General)
[x] Scan boot sectors of selected drives
[x] Scan master boot sectors
[x] Scan registry
Archives
[x] Scan archives
[x] Smart Extensions
Heuristic
[x] Macrovirus heuristic
[x] enable AHeAD (Advanced Heuristic Analysis and Detection)
Main Window
Firewall
Basic Firewall
Settings
Public Zone: High
Trusted Zone: High (I'm not sharing any printers or files)
Advanced Settings
[ ] Block all fragments
[ ] Block trusted servers
[ ] Block public servers
[ ] Enable ARP protection
[x] Filter IP traffic over 1394
[x] Allow VPN protocols
[x] Allow uncommon protocols at high security
[ ] Lock hosts file
[x] Disable Windows Firewall
(*) Ask which Zone to place new networks in upon detection.
[x] Automatically put new unprotected wireless networks (WEP or WPA) in the Public Zone
[x] Enable IPv6 networking
Application Control
Settings
[Screening]
Min. = Network firewall screens some programs.
"You will not be protected from some zero-day threats."
(I can't leave my computer alone so it can update programs if I use the "Max." setting, because I have to constantly accept connections. If I already have a virus it might change the firewall settings.)
[DefenseNet]
Off = Your DefenseNet is set to Off.
"You will not receive security SmartDefense Advisor."
Avira AntiVir Personal 10 (Windows XP) (Year 2011)
Extras
Configuration
[x] Expert mode
Scanner
(General)
[x] Scan boot sectors of selected drives
[x] Scan master boot sectors
[x] Scan registry
Action on Detection
(*) Interactive
Archives
[x] Scan archives
[x] Smart Extensions
Heuristic
[x] Macrovirus heuristic
[x] enable AHeAD (Advanced Heuristic Analysis and Detection)
Update
(General)
[x] Activate
[x] Repeat job if time has expired
General
Threat categories
[x] Adware
[x] Adware/spyware
[x] Application
[x] Back-door client
[x] Dialer
[x] Double-extension files
[x] Fraudulent software
[x] Games
[x] Jokes
[x] Phishing
[x] Programs that violate the private domain
[x] Unusual runtime compression
ZoneAlarm Free Firewall 10 (Windows 7)
Home Button
Computer Box/Tab
Basic Firewall: On
Settings
Public Zone: High
Trusted Zone: High (I'm not sharing any printers or files)
Advanced Settings
[ ] Block all fragments
[ ] Block trusted servers
[ ] Block public servers
[ ] Enable ARP protection
[x] Filter IP traffic over 1394
[x] Allow VPN protocols
[ ] Allow uncommon protocols at high security
[ ] Lock hosts file
[x] Disable Windows Firewall
(*) Ask which Zone to place new networks in upon detection.
[x] Automatically put new unprotected wireless networks (WEP or WPA) in the Public Zone
[x] Enable IPv6 networking
Anti-virus & Anti-spyware: Off
Application Control: On
Settings
Max. = Network firewall screens all programs (creates alerts for new/changed software)
"Most secure, but creates the most alerts." (doesn't create too many alerts in my opinion)
Manual = Your DefenseNet is set to Manual
"You will receive security SmartDefense Advisor to help you respond to program alerts."
PC Tune-Up: Off
Internet Box/Tab
Anti-phishing: On (this is the browser plugin)
Browser Virtualization: Off
Anti-spam: Off
Parental Controls: Off
Identity & Data Box/Tab
Identity Protection: Off
DataLock Hard Drive Encryption: Off
Online Backup: Off
ZoneAlarm Free Firewall 9 (Windows XP)
Overview
Preferences
Check for Updates
Check for product updates: (*) Automatically
General
[x] Load ZoneAlarm at startup
[x] Protect the ZoneAlarm client
Contact with ZoneAlarm
Whenever I request info from ZoneAlarm
[ ] Alert me with a pop-up before I make contact ("Displays a warning before contacting ZoneAlarm to deliver registration information, get product updates, research an alert, or access DNS to look up IP addresses.")
[ ] Hide my IP address when applicable
[x] Hide the last octet of my IP address when applicable
Firewall
Main
Internet Zone Security: High
Trusted Zone Security: High (I'm not sharing any printers or files)
Advanced Settings
[ ] Block Trusted Zone servers
[ ] Block Internet Zone servers
[ ] Allow uncommon protocols at high security
[ ] Allow Outgoing DNS/DHCP in Trusted Zone on High setting
[ ] Allow Outgoing DNS/DHCP in Internet Zone on High setting
[ ] Lock host file
[x] Disable Windows Firewall
[x] Filter IP traffic over 1394
Program Control
Program Control
(*) Medium (creates alerts for new/changed software)
( ) Low ("Program control is in learning mode.")
SmartDefense Advisor
(*) Manual ("You will receive security advice from SmartDefense Advisor to help you respond to Program alerts.")
( ) Automatic ("SmartDefense Advisor will configure program access whenever advice is available.")
Advanced
[x] Allow certified Microsoft programs to run automatically
Automatic Lock
(*) Off (I might leave my PC to download something and lock the PC until I'm back, so no thanks)
Custom
Lock Mode to Use When Enabled
(*) Lock when screensaver activates
When Lock Engages
(*) Allow pass-lock programs to access the Internet (you may need an additional locking program to lock programs)
Alerts & Logs
Main
Alert Events Shown
(*) Off ("Do not show any informational alerts. (Program alerts will still be displayed.)")
Last modified: June 28th, 2014
Author: Tomi Häsä (tomi.hasa@gmail.com)
URL: http://sites.google.com/site/tomihasa/security-application-settings