ZoneAlarm - software firewall produced by Zone Labs. It includes an inbound intrusion detection system, as well as the ability to control which programs can create outbound connection — the latter is not included in the Windows XP Service Pack 2 firewall. In ZoneAlarm, program access is controlled by way of 'zones' which the computer's network connections are divided up into. The 'trusted zone' generally includes the user's local area network and can share resources such as files and printers, while the 'Internet zone' includes everything not in the trusted zone. The user can specify which 'permissions' (trusted zone client, trusted zone server, Internet zone client, Internet zone server) to give to a program before it attempts to access the Internet (e.g. before running it for the first time) or, alternatively, ZoneAlarm will ask the user to give the program permission on its first access attempt.