ZoneAlarm Pro should be sufficient so long as it is configured and working correctly.
To test it go to
www.grc.com and find the "Shields UP!!" page.
When you get there run the "All Service Ports" service.
If ZoneAlarm is working, everything should come up green (ie "Stealth").
RC