I have asked tech support about this and other users and no one can really give me a full on answer other than just "block each port" individually. My linksys, when the firewall is set up - it does an incredible job of stealthing the ports right out of the box. By "stealth" I mean ports stealthed on GRC.com... Several other sites indicate they aren't stealth as well... (only closed)

I ran the basic Shields up and i have my ZA100 set for medium security (and rules turned off).. and it only complained about two ports being open.. One of which is already protected directly by the ZA100/Sofaware box and the other is because i have Allow ICMP enabled (for compatibility with some game system). The port 25 is more or less covered if you have Vshield enabled.. Also realize that Steve Gibson of GRC is a bit of a nutter , has some good points, but dont take everything he says at gospel, and worse of all DON'T PANIC... there are reasons that are perfectly valid why you don't want every thing locked and batten... you can make things unusable!... the best lock is disconnecting from the net if you really want to be paranoid..

See an older thread on the ZA forums
Old thread on GRC

Scroll down past the Tivo stuff..
-bugeek

(Note.. what version of the firmware for the Sofa box are you using.. I just realized this might make a difference in you getting the closed vs stealth)

In it's default configuration, the Z100G does have full "stealth" from the WAN interface, since no ports are open.

If you opt to enable the VPN Server or remote HTTPS access, then obviously this would compromise your "Stealthiness" since the ports must be open to the world.

There is no reason to be concerned.

The SofaWare Team