I haven't used Zone Alarm in a while and so missed when the story broke. However; it appears ZA phones home to servers controlled by Zone Labs. No one has given a satisfactory explanation of why this behavior was coded in, to the best of my knowledge. There are four servers involved.
This little article in The Inquirer details how to block this behavior, using the hosts file in ZA itself. It's easy to implement.