Setting the program control level

ZoneAlarm security software offers several methods of program control. Basic program control lets you determine access and server rights for individual programs. Advanced Program Control prevents malware from misusing trusted programs. Application Interaction Control alerts you if a process tries to use another process or a program tries to start another program. OSFirewall protection detects when programs try to use your operating system to perform suspicious actions on your computer. (This section explains how to set a general program control level, and how to customize settings for Advanced Application Control and Application Interaction Control. For details on OSFirewall, see Configuring OSFirewall protection .)

To limit the number of alerts you see, you can use the following features:

Use the Auto program control level, which employs the Auto-Learn feature.
To benefit from recommended program settings, leave SmartDefense Advisor on the Auto setting.

Understanding Auto-Learn

Auto is the default setting for the first 21 days of using ZoneAlarm security software. ZoneAlarm security software observes and tracks which safe programs you use regularly, so that you are not interrupted with alerts and questions about these programs. After this self-learning period, a message appears asking you whether you would like to continue in Auto learning mode or move program control level to Max so that you have maximum outbound protection.

Setting the Program Control Level

To set the program control level:

Select Program Control.
In the Program Control area, click the slider and drag it to the desired setting.

Max (for versions with Anti-virus) High (for versions without Anti- virus)	With this setting, you may see a large number of alerts. Programs must ask for Internet access and server rights. OSFirewall will monitor for suspicious behaviors. Advanced Program control and Application Interaction Control are enabled. By default, component control is disabled.*
Auto (for versions with Anti- virus)	This Auto-Learn mode minimizes alerts by recognizing your frequently used programs and giving them network access without interrupting your work with frequent alerts This is the default level for the first 21 days. Most program alerts are suppressed by giving access to programs you frequently use and relying on SmartDefense Advisor to screen programs The OSFirewall will also screen some programs. Not as secure as the Max or High setting.
Medium (for versions without Anti- virus)	This is the default setting. Programs must ask for Internet access and server rights. OSFirewall will monitor for suspicious behaviors. By default, component control is disabled.*
Min (for versions with Anti- virus)	OSFirewall is disabled. By default, component control is disabled.* Server control and stealth mode are available
Low (for versions without Anti- virus)	OSFirewall is disabled. By default, component control is disabled.* Server control and stealth mode are not available
Off	Program control is disabled. No programs or components are authenticated or learned. No program permissions are enforced. All programs are allowed access/server rights. All programs are allowed to perform suspicious behavior. No program alerts are displayed.

* Component control is disabled by default. If you have turned component control on, it will remain enabled as long as program control is set to High, Medium, or Low. For information about component control, including directions for turning it on, see Enabling Component Control .

To set custom program control options:

Select Program Control.
In the Program Control area, click Custom.

The Custom Program Control Settings dialog appears.

On the Program Control panel, specify the settings to apply.

Enable Advanced Program Control	Prevents trusted programs from being used by untrusted programs to circumvent outbound protection.
Enable Application Interaction Control	Alerts you when a process attempts to use another process or any time a program launches another program.
Enable component control	Restricts individual components that malware programs may (such as DLL files or ActiveX controls). See Enabling Component Control for details.
Enable services control	Alerts if you if untrusted programs attempt to install or modify a service or driver. SeeUnderstanding Services Control for more information.

Click OK.