ZLID -> CPIF hoses cygwin ssh?

[Tom Roche]

My workplace was using Zone Labs, and today we were told to upgrade to

Check Point Integrity Flex version:6.0.202.000
TrueVector version:6.0.202.000
Driver version:6.0.202.000

(which appears to be essentially the same product) so I installed
CPIF on my winXP laptop. I then rebooted and restarted my usual
applications, e.g. Notes, Firefox, and Cygwin. Cygwin's X server
started, and I was able to create my usual xterm's and Emacs, after
some prompts from the firewall: in each case I said Yes and Remember
to the connection. But my .bash_profile starts ssh-agent, and instead
of getting the usual passphrase prompt, I got

> Could not open a connection to your authentication agent.

And when I try to shell out to the linux boxes I run, I get (e.g.)

> ssh: connect to host <hostname/> port 22: Connection refused

I then shutdown CPIF and retried, and was able to ssh normally. So I
restarted CPIF, opened Program Control, and set all permissions
({Access, Server} x {Trusted, Internet}) == Allow, for ssh*.exe.
I then attempted to ssh out again, and failed as before.

What do I need to do to make CPIF allow ssh?