Comodo 3.0.16.295 is out.

[Fuzzfas]

Version 3.0.16.295
NEW! Anti-Leak Configuration:
- A new default configuration is introduced to make D+ show fewer number of popup alerts while still remaning leak proof.
NEW! On-Demand Virus Scanning:
- CFP now provides an option to scan for viruses during the installation and from its graphical user interface
NEW! A-VSMART Warranty Program:
- CFP now provides the users an option to enroll one of the available A-VSMART Warranty programs
IMPROVED! Self-Defense:
- There has been various reports that CFP 3.0 is attacked by some malware to disable its protection.
The self defense has been modified such that an ungraceful termination of CFP will block every unknown action (i.e. it will function as if "Block all unknown actions if the application is closed" option is selected. This option was not enabled by default).
IMPROVED! Default Configuration:
- Default configuration now protects more registry keys and more COM interfaces.
- Default Web Browser and FTP Client policies are modified to support passive FTP requests
IMPROVED! Handling of known code executing applications:
- Defense+ has been modified such that some known code executing programs such as rundll32.exe or windows scripting host are not autimatically trusted anymore.
IMPROVED! Pending Files:
- Defense+ has been modified such that it is not going to report any pending files if it is not in clean PC mode.
FIXED! Bugs in Defense+ Engine:
- Fixed numerous bugs that could stop Defense+ to properly handle the suspicious actions(e.g.bugs in registry and file protection, key logging etc).
- Fixed the bug that could prevent CFP from functioning properly in certain types of hardware configurations(e.g. when a USB harddisk is present etc.).
FIXED! Minor Bugs in the Graphical User Interface

The download link doesn't appear yet in the site, but you can find it here:

<<<<<<direct download link removed>>>>>>>>>

http://www.personalfirewall.comodo.com/download_firewall.html

[Hermescomputers]

Thank you Fuzfas,

The internal update also is able to detect the new update. I am installing via the internal mechanism to see if it is working ok on my end...

[Fuzzfas]

-{ Quote: "Thank you Fuzfas,

The internal update also is able to detect the new update. I am installing via the internal mechanism to see if it is working ok on my end..." }-

Yeah, i saw on Comodo forum that people were using the internal update, but i always do clean installs, so i searched for the setup file. At Comodo's site, the download link showed only the old version as available, but i changed the version number manually with the new one and voilà, the new version setup was ready for download.

I will wait for the guinea p... err... i mean for other users to test it first. ;D I will then install it tomorrow cleanly.

[Hermescomputers]

-{ Quote: "Yeah, i saw on Comodo forum that people were using the internal update, but i always do clean installs, so i searched for the setup file. At Comodo's site, the download link showed only the old version as available, but i changed the version number manually with the new one and voilà, the new version setup was ready for download.

I will wait for the guinea p... err... i mean for other users to test it first. ;D I will then install it tomorrow cleanly." }-

Oink! :)

Just finished the update... took 2 reboots...
Nothing negative to report.

I'm loving the new malware scan:

[Fuzzfas]

Interesting. Although i am more curious to see what exactly has changed in pending files management.

BTW, in Comodo forums, they say the current AV engine isn't great (although fast), but this is only the first step of development. In the future releases they will be working more on the AV engine. Melih also stated that it's in their goals to make the fastest scanning engine in the market. Sounds interesting. Specially if it remains free. :argh:

[Hermescomputers]

-{ Quote: "Interesting. Although i am more curious to see what exactly has changed in pending files management.

BTW, in Comodo forums, they say the current AV engine isn't great (although fast), but this is only the first step of development. In the future releases they will be working more on the AV engine. Melih also stated that it's in their goals to make the fastest scanning engine in the market. Sounds interesting. Specially if it remains free. :argh:" }-

yes.. the "Pending Files" is really pending isn't it... mine currently has 7972 files pending... :-\

Good news about the engine though... I wonder if this is the same engine as in their AV or if this is a new design specific to the firewall?

[Fuzzfas]

-{ Quote: "yes.. the "Pending Files" is really pending isn't it... mine currently has 7972 files pending... :-\

Good news about the engine though... I wonder if this is the same engine as in their AV or if this is a new design specific to the firewall?" }-

If you let the pending files rise so high, it beats the purpose of having them. How are you supposed to inspect 8000 files? I have 12 right now, but had cleaned them earlier this day and haven't installed anything new yet. I try to "forget about them" for the time being. From the change log, it would appear that if you set D+ in any other mode except "Clean PC", you won't have pending files? ??? I will test that tomorrow.


Melih said that the current AV engine isn't very functional yet, as it is the first phase of the introduction of their new version 3 antivirus engine in the firewall. So i think they use the engine they have been developing for the CAVS 3.

[Coolio10]

Check out the new site

http://www.personalfirewall.comodo.com/

A-VSMART Warranty sounds interesting. Is it a good price hermes?

[RejZoR]

Well, clicking Scan computer does exactly nothing. Also how it updates the signatures?

[Diver]

-{ Quote: "Check out the new site

http://www.personalfirewall.comodo.com/

A-VSMART Warranty sounds interesting. Is it a good price hermes?" }-


Well, at least they have a business plan.

[fax]

-{ Quote: "Check out the new site

http://www.personalfirewall.comodo.com/

A-VSMART Warranty sounds interesting. Is it a good price hermes?" }-

-{ Quote: "The A-VSMART Warranty covers two malware removal services per year on a single, serialized, installation of Comodo Firewall Pro." }-

Isn't it a bit expensive $79 for two malware removal?:blink: :blink:
Most AV/AS companies include malware support/help in their annual subscription and they do cost less.

Cheers,
Fax

[Dieselman]

-{ Quote: "Well, clicking Scan computer does exactly nothing. Also how it updates the signatures?" }-
Scan works fine for me. Running as we speak.

[Coolio10]

-{ Quote: "Isn't it a bit expensive $79 for two malware removal?:blink: :blink:
Most AV/AS companies include malware support/help in their annual subscription and they do cost less.

Cheers,
Fax" }-
No, it means the two services.

A-VSMART Warranty and A-VSMART Warranty PLUS Expert Installation.

[Coolio10]

-{ Quote: "Well, clicking Scan computer does exactly nothing. Also how it updates the signatures?" }-
Users reported it only works in XP.

It updates on bootup like norton liveupdate.

[fax]

-{ Quote: "No, it means the two services.

A-VSMART Warranty and A-VSMART Warranty PLUS Expert Installation." }-

Nope.... with A-VSMART Warranty PLUS Expert Installation you get to $119 :o

Fax

[WilliamP]

It is supposed to have leak protection option when you select the Firewall only. I have downloaded 3.0.16.295 and on setup selected just the firewall with leak protection. After installation I was getting Defense+ pop ups. When I checked the the proactive defense it was set to Train with Safe Mode. When I move the slide to [Disabled] the Defense+ pop ups stopped. Do I have leak protection now?

[argus tuft]

Oops :(

[WilliamP]

I asked my question on the Comodo forum and can't get an answer. How can I get the Firewall only with leak protection?

[Coolio10]

-{ Quote: "I asked my question on the Comodo forum and can't get an answer. How can I get the Firewall only with leak protection?" }-
It is already on. A few defence+ settings were disabled to reduce popups.

[WilliamP]

Thank you Coolio10. I will give it a try.

[Hermescomputers]

-{ Quote: "Check out the new site

http://www.personalfirewall.comodo.com/

A-VSMART Warranty sounds interesting. Is it a good price hermes?" }-

Ouch... these guys wanna put me outa of business! ;D

I am a big fan of accountability for security products as I personally happen to think it is sorely lacking in the industry at large... (Read my chats with Solcroft a few days ago.) However once they realize how many idiots are going to call 3-4 time a week just for kicks, they may have to re think their pricing strategies or they will have to employ and "exploit" a lot of techies from the third world to deliver services at this price...

Considering the numbers and types of software related problems they will have to diagnose and solve for free it is going to be rather interesting to watch.

I wouldn't last a month with that offer! couldn't finance it long enough to make it lucrative... Imagine paying qualified systems engineers with a specialty in security to service thousands a problems a day... sustained? Considering the popularity of Comodo's firewall...

Also think about having hundreds of people working to rummage through every users systems... The liabilities and the risks involved are enormous for an outfit like Comodo... I wish them luck! :)

I would be very surprised if this strategy doesn't change very soon! But I must say this... It is an incredible offer to the consumers at large! :thumb:

I certainly hope they will be able to deliver it effectively and to make this business model work for a long time as it would certainly help a lot of users with a lot of computer security troubles who currently cant help themselves as it's too expensive for them to get professional assistance... Way to go Comodo!

[Perman]

Hi,

All of the sudden, Comodo freeware is associated with $$$$$$ ?

Well-planned business plan or .....

Waiting to see its true COLOUR.

Other than that, a solid program and people love it just as a freeware.

Take care.

[WilliamP]

I wonder why Comodo recommends not installing Comodo firewall with SSM? I would like to report that I have CFP 3.0.16.295 Firewall only [with leak protection]. I also have SSM Pro. and NOD 32 with no problems on two computers. On one I also have Threatfire.

[Carver]

When the Comodo 3.0.16.295 firewall was released I was reading the Comodo firewall forum checking on when they were going to release it and I was also occasionally clicking update on the firewall. At first when the firewall started to update I was so happy, then about half way I got a error 108 I think it was. The servers must be swamped, so I tried 15 mins later. This time it downloaded 100%, I was jumping for joy at this point. The firewall started to install, BOClean poped up. A few days ago BOClean exited and wouldn't restart, the popup said that BOC425.XYZ was corrupt. I ended up deleting BOClean cleaning the registry and reinstalling BOClean. Then I put cfp.exe on the excluder list. Then I start looking on the Comodo forum to see if anyone else had the same problem, the post said to put one other file on the list...CMD Agent. Getting back to installing the Comodo 3.0.16.295 firewall, the popup recomended I scan the computer with my AV. Well this took over 3 times as long as a regular scan don't know why. I really didn't expect to find anything (because I take great pains to keep the crap out) and I didn't find anything, and nether did the new firewall scan. It is running very quietly no popups unlike 3.0.15.277 which spewed pending files like there was tomorrow.

[virtumonde]

During the install when firewall reported that is installed my pc frooze ,and i had to reboot.I started in safe mode ,continued the installation,reboot after.then i uninnstalled and reinstalled again without beeing connected and now everything is ok::) .It was not a good start for me ,but i like how the product is working ,it is surprisingly light on my old pc,vista with 1 Gib Ram ,and i'll renounce for now at my av protection,cos this looks very strong.

[SystemJunkie]

I am keen of testing it. Hopefully the switch to installation vulnerability is removed.

[Fuzzfas]

-{ Quote: "Hi,

All of the sudden, Comodo freeware is associated with $$$$$$ ?

Well-planned business plan or .....

Waiting to see its true COLOUR.

Other than that, a solid program and people love it just as a freeware.

Take care." }-

I must say, i was surprised too about this and i still can't say if positively or not. I guess as long as it doesn't phone home automatically it will be ok for me. I will install the new version soon.

At least, now it makes more sense. They made a free product and decided to "step on it" to sell a paid service.

This is almost a political manifesto-declaration here by Melih Abdullahyoglu. A quite interesting one, that could shake the whole market, although a bit dramatic in tone.

http://www.melih.com/2008/02/04/enough-is-enough-time-for-accountability-for-the-desktop-security-industry/

I do think there is a change of policy. Originally, in the "why free?" question, part of the answer, was:

"And this will help us sell more Digital Certificates and other services we have as we will have a big brand!"

"Because we will provide them all of the security products they will need, for free, we are hoping that we will gain our user's trust so that we can be a big brand and this will help our other services that we sell to enterprises!"

http://forums.comodo.com/melihs_corner_ceo_talkdiscussionsblog/give_all_that_for_free_whats_the_catch_how_does_comodo_make_money-t764.0.html

Well, apparently, now they decided that digital certificates and services to enterprises aren't enough, when you can sell services to the end home user too.

Anyway, as long as i can keep it updating manually, i guess it's good. But i kinda have mixed feelings about this. Not for anything else, but because i feel that now they reveal a part of their plans that weren't revealing some months ago.

On the other hand, it could have positive conseguences for the home user in general, if other software vendors, were forced to give for the price of their product a "cleaning insurance" too.

[Kees1958]

Good to see D+ evolving

Please help me understand, the release notes

Defense+ has been modified such that it is not going to report any pending files if it is not in clean PC mode.

So it will report pending files when in clean PC mode? Should be logical because clean PC assumes a clean PC. When files are changed you can not trust them to be clean anymore.

So it is now n=more rewarding to leave comodo in training mode (or train in safe mode) and then put it into paranoid mode. Is this a correct conclusion?

Regards Kees

[RejZoR]

-{ Quote: "Users reported it only works in XP.

It updates on bootup like norton liveupdate." }-

So basically it's not even working under Vista? Yey...::)

[jtcst]

-{ Quote: "I must say, i was surprised too about this and i still can't say if positively or not. I guess as long as it doesn't phone home automatically it will be ok for me. I will install the new version soon.

At least, now it makes more sense. They made a free product and decided to "step on it" to sell a paid service.

This is almost a political manifesto-declaration here by Melih Abdullahyoglu. A quite interesting one, that could shake the whole market, although a bit dramatic in tone.

http://www.melih.com/2008/02/04/enough-is-enough-time-for-accountability-for-the-desktop-security-industry/

I do think there is a change of policy. Originally, in the "why free?" question, part of the answer, was:

"And this will help us sell more Digital Certificates and other services we have as we will have a big brand!"

"Because we will provide them all of the security products they will need, for free, we are hoping that we will gain our user's trust so that we can be a big brand and this will help our other services that we sell to enterprises!"

http://forums.comodo.com/melihs_corner_ceo_talkdiscussionsblog/give_all_that_for_free_whats_the_catch_how_does_comodo_make_money-t764.0.html

Well, apparently, now they decided that digital certificates and services to enterprises aren't enough, when you can sell services to the end home user too.

Anyway, as long as i can keep it updating manually, i guess it's good. But i kinda have mixed feelings about this. Not for anything else, but because i feel that now they reveal a part of their plans that weren't revealing some months ago.

On the other hand, it could have positive conseguences for the home user in general, if other software vendors, were forced to give for the price of their product a "cleaning insurance" too." }-

It appears to be a quick & easy money grab, IMO, like the product service plans offered by major electronic stores. Chances are, most people will never need (or bother) to claim their warranty plan. (especially with this new comodo warranty thing, because, after all, they've been hyping their new firewall as the second coming in PC security!)

As for the latest version, it is running smoothly for me.

[Fuzzfas]

-{ Quote: "Users reported it only works in XP.

It updates on bootup like norton liveupdate." }-

During booting at Windows? I hope that it does NOT do that, when i have checked off all auto-update options and removed the Comodo's own rules in the Network security policy.

I don't like one bit the idea of something calling home while i still can't see the desktop.

[Stijnson]

How does the virus protection in Comodo work? Does it cause problems with already installed AV products?

I haven't installed Comodo on my box yet because I was waiting for the new release (all the Defense+ threads are overwhelming to say the least). Does the AV protection of Comodo also kick in when you opt for the 'firewall only' installation or is the AV protection part of Defense+?

Then again, what happens when one decides to activate Defense+ later on?

[Fuzzfas]

-{ Quote: "How does the virus protection in Comodo work? Does it cause problems with already installed AV products?

" }-

It's on demand only. No conflicts here with AVG Free. Since it's not resident, i don't think it will create problems with most AVs.

I don't know about the rest. I installed it with D+ and it was there.

The only observation is that i can't see a signature version number anywhere and i am not sure about how it updates signatures.

[Hermescomputers]

-{ Quote: "During the install when firewall reported that is installed my pc frooze ,and i had to reboot.I started in safe mode ,continued the installation,reboot after.then i uninnstalled and reinstalled again without beeing connected and now everything is ok::) .It was not a good start for me ,but i like how the product is working ,it is surprisingly light on my old pc,vista with 1 Gib Ram ,and i'll renounce for now at my av protection,cos this looks very strong." }-


Perhaps this has nothing to do with "your" specific issue virtumonde, however heres my two bits:

Most installation programs problems are simply related to memory and disk fragmentation...

Before installing a new program: Either reboot your computer or defragment the memory with some type of RAM recovery tools. AWC2 has a nice one greatly improved actually for free. Also It is always good policy to run a file cleanup scan and to delete all the junk, then to defrag your hard disk...

Only then should you be able to install applications in complete safety...

[_ab]

Hi,

i am using SSM for the HIPS part of my security system, so Defense+ is turned off. I read some posts here & wonder if the anti leak is active, when defense+ is off. If so, maybe i should activate Defense+ again, with the anti leak option only been checked. Does anyone know, which module would be needed to be activated in this case?. Is that possible? Or is the anti leak active anyway, even with defense+ turned off?

[virtumonde]

-{ Quote: "Perhaps this has nothing to do with "your" specific issue virtumonde, however heres my two bits:

Most installation programs problems are simply related to memory and disk fragmentation...

Before installing a new program: Either reboot your computer or defragment the memory with some type of RAM recovery tools. AWC2 has a nice one greatly improved actually for free. Also It is always good policy to run a file cleanup scan and to delete all the junk, then to defrag your hard disk...

Only then should you be able to install applications in complete safety..." }-
I use diskeeper,and i have ram saver also,But i will ceratainly follow your advice from now and reboot before installing any important security.Winamp was running during the time,and i didn't look at cpu usage before starting .The ram was ok 700 available at that time,but i think i should had closed winamp,as it continuosly reads from the hdd.I'm still impressed with how light the pc is now,and finally my pending files are gone:-)) D+in train with safe mode . Thanks

[Diver]

Running it right now. Definitely an improvement over the initial release. Very low CPU usage. Still a bit on the noisey side. I set it up with medium protection and added keyboard monitoring.

[WilliamP]

_ab, It has been configured such that the protection is mostly targeted to the network related activities.

For example: Screenshot or keylogging protection(except windows hooks) are disabled. You should not see D+ alerts for the applications started when you double click and start them.

Protected Files and Protected COM Interfaces are modified accordingly.

But still D+ will be learning things. After some time, it should get silent. I downloaded selecting Basic firewall with leak protection myself. Leave the settings default and so far all is well. I have SSM paid also.

[BuzzStone]

I installed 295 over top of the other version. It will not pass PCFlanks leaktest. Does it pass for you? I do not use D+.

[Hermescomputers]

-{ Quote: "I installed 295 over top of the other version. It will not pass PCFlanks leaktest. Does it pass for you? I do not use D+." }-


I cant try too many layers for something like this on my system:

[Hermescomputers]

Tested the Firewall with several of the "Basic" Online tests and so far 100 % protection!

I may try later with Nessus...

[Fuzzfas]

-{ Quote: "I installed 295 over top of the other version. It will not pass PCFlanks leaktest. Does it pass for you? I do not use D+." }-

It won't work like that. You need to make clean installation. If you install it on top, the antileak-protection won't work. It is explained in Comodo forum.

You must do fresh install, select "only firewall" and make sure you leave ticked the "antileak protection" box that will appear. Only then you will have the new feature.

Also, i think i have read that there is an installation bug, where you need to reboot twice instead of once, for all your rules to be remembered correctly.

[BuzzStone]

Thanks for the replies. I'll do a fresh install.

[Gren]

Yep, Thanks for that Fuzzfas.

Am also using CFL with D+ deactivated as I'm using ThreatFire. The leak protection is certainly welcome so will look to do a clean install.

[Dieselman]

-{ Quote: "Yep, Thanks for that Fuzzfas.

Am also using CFL with D+ deactivated as I'm using ThreatFire. The leak protection is certainly welcome so will look to do a clean install." }-
No need for TF if you use Comodo with D+ active.

[BuzzStone]

A clean install did the trick!

[rogervernon]

It's running well for me on XP home + Avira PE Premium & Comodo BOClean.
Boot and shut down times are good. It's not noisy if you disable balloon messages!
Early days yet, but no bugs here.

[Gren]

-{ Quote: "No need for TF if you use Comodo with D+ active." }-

True but I'd heard a few negative comments about D+ (mainly about how 'noisy' it was) and I like the fact that TF is quiet and light.

D+ could though be a more elegant solution as it's all part of 1 package. It's only the flick of a switch and a restart to activate it though so I'm just keeping an eye on opinions.

[Dieselman]

-{ Quote: "True but I'd heard a few negative comments about D+ (mainly about how 'noisy' it was) and I like the fact that TF is quiet and light.

D+ could though be a more elegant solution as it's all part of 1 package. It's only the flick of a switch and a restart to activate it though so I'm just keeping an eye on opinions." }-
Not noisey for me. Let it learn for the first week. Just like any other firewall. Once all apps are learned then no more pop ups.

[Fuzzfas]

-{ Quote: "True but I'd heard a few negative comments about D+ (mainly about how 'noisy' it was) and I like the fact that TF is quiet and light.

D+ could though be a more elegant solution as it's all part of 1 package. It's only the flick of a switch and a restart to activate it though so I'm just keeping an eye on opinions." }-

Threatfire is quieter, no doubt. But Comodo, set to clean pc mode, isn't very anoying. Pending files is the most annoying part for me. The pop ups aren't many. The only setting that i disable in D+ is file protection, because even when i download a setup on the desktop it asks me if Opera should be allowed to create a new directory, which i find annoying and rest of security provided is plenty enough anyway.

[rolarocka]

-{ Quote: "Threatfire is quieter, no doubt. But Comodo, set to clean pc mode, isn't very anoying. Pending files is the most annoying part for me. The pop ups aren't many. The only setting that i disable in D+ is file protection, because even when i download a setup on the desktop it asks me if Opera should be allowed to create a new directory, which i find annoying and rest of security provided is plenty enough anyway." }-
on protected files/folders of Opera u can add allowed files/folders like this for example:
C:\Documents...\User\Desktop\*
this way Opera is allowed to create anything on the desktop without asking every time

[Fuzzfas]

-{ Quote: "on protected files/folders of Opera u can add allowed files/folders like this for example:
C:\Documents...\User\Desktop\*
this way Opera is allowed to create anything on the desktop without asking every time" }-

Thanks. Yes, i know. You can also go to Opera's own rule and click modify and give it permission, so that only opera can access the desktop and create whatever she likes.

But then i have other programs too that need to access various folders and so i prefer disabling it.

[Diver]

The installer could show all the options earlier. If D+ is chosen then the different levels are only shown if default is not chosen, but the anti-leak mode is not shown unless the firewall only mode is chosen. This last point is strange as it puts one right back in D+ after choosing to not use it. Probably part of the fallout from Scott Finney's idiotic babble.

[xandros]

thank you

[EricEgan]

Just a bit of advice regarding these "PENDING FILES".

I only myself figured it out the other day but if you click on "PURGE" this will remove all the "TEMPORARY" .tmp etc files from your pending list. You'll be surprised how many this clears out!

You can then do your Lookup and Submit afterwards. If it's a file from a program you know to be safe just select thoes ones and ADD to my Safe Files" This will for now put these in your SAFE FILES list and you can lookup and submit those in your own time or just check them every now and then with the Lookup feature and it will add the "Comodo SAFE" files to the Defense+ Safe Files List (not sure where exactly these are held).

Purging your Pending Files now and again will really clear out those items. Usually there are hundreds of temp files from when you install a program etc...

Eric

[Fuzzfas]

I asked twice about this in Comodo forum, but nobody seems willing to reply.

Has anyone figured out whether there is really an AV signature update in Comodo? There is no signature version anywhere.

Check for updates doesn't seem to download signatures either.

IF (big if) there is a signature update, then it is during boot as Coolio said and behind the back of the user that can't verify anything. But i tend to find it odd to not be able to update manually too. I also blocked internet access during boot to see if it would try to update later. No connection was made. And i have had no pop up from Comodo during normal operation.

So, what's the deal with the AV scanner? I tend to believe that it doesn't update anything.

Ehm...Coolio maybe?

[aigle]

Installed the new verion. IMO virus scan is useless without a right click scan menue for explorer. Did anyone posted a wish list for this feature? Also on scan results there is only delete option, no quarantine.

[Fuzzfas]

-{ Quote: "Just a bit of advice regarding these "PENDING FILES".

I only myself figured it out the other day but if you click on "PURGE" this will remove all the "TEMPORARY" .tmp etc files from your pending list. You'll be surprised how many this clears out!

You can then do your Lookup and Submit afterwards. If it's a file from a program you know to be safe just select thoes ones and ADD to my Safe Files" This will for now put these in your SAFE FILES list and you can lookup and submit those in your own time or just check them every now and then with the Lookup feature and it will add the "Comodo SAFE" files to the Defense+ Safe Files List (not sure where exactly these are held).

Purging your Pending Files now and again will really clear out those items. Usually there are hundreds of temp files from when you install a program etc...

Eric" }-

Yes, this is how on theory you should do it. But i have better things to do that eating my upload speed to send all pending files to Comodo. So i purge, send them to safe files and then remove them. With the new version, my plan is to soon abbandon clean PC mode and go to Train with Safe mode, that shouldn't create pending files anylonger.

[Dieselman]

If you want less pending files the move the slider in D+ to Train with Safe Mode like the Firewall slider. If you are in Clean PC Mode then any file or app introduced after the initial install of Comodo will be added to pending files. When ever I download something it shows up in my pending files if I use Clean PC Mode. With the slider on Train with Safe Mode I no longer get pending files. You still have the same protection also. :)

[Ocky]

Rather than starting a new thread, as this concerns the updated
Comodo firewall, I will take my chances here. My question (also posted
in Comodo forum) :-

I did a clean install (the whole hog !) in order to get Firewall plus Leak Test option.
Now if I import my previous configuration, will this nullify the Leak Test protection ?

Under Manage Configurations I now have 'My Firewall Prefs' ticked instead of
Comodo Network Security which includes Leak Test protection.

Please advise. Thank and regards.

[Dieselman]

Well I have D+ enabled and I pass all leak tests.

EC: Dieselman, please don't quote the entire post, especially when it's the most recent post in the thread. Thank you.

[SystemJunkie]

This version did not work for me, network installation corrupted. I stepped back to 3.0.15.

[Dieselman]

-{ Quote: "This version did not work for me, network installation corrupted. I stepped back to 3.0.15." }-

Make sure you do a complete uninstall first.

[SystemJunkie]

-{ Quote: "
Make sure you do a complete uninstall first." }-
I tried several times, at the end I wasn´t able to connect to the internet therefore I reinstalled my backup from january this runs with ease (fluent and fast like water) and I doubt that I will retry to install latest Comodo, because of the network problems. Never change a running system. ;D

[Hermescomputers]

-{ Quote: "I tried several times, at the end I wasn´t able to connect to the internet therefore I reinstalled my backup from january this runs with ease (fluent and fast like water) and I doubt that I will retry to install latest Comodo, because of the network problems. Never change a running system. ;D" }-

Sounds like you need a maintenance run on your computer... perhaps a registry and file clutter scan + defragmentation might help.

[Dieselman]

There is an extensive uninstall and clean procedure in the Comodo fourms. I never had to use it but give it try. Revo Uninstaller in advanced mode always does the trick for me. Also CCleaner registry issues.

[ggf31416]

Anti-Leak is Defense+ without protection against direct access to Monitor, Disks and Keyboard and less Protected files and less Protected COM Interfaces.

[Dieselman]

Note: Pending files has been addressed and fixed. You should only see pending files in Clean PC mode so novices can see what files are added or ones they are not sure of. Use D+ in Training plus Safe Mode and you will not have any pending files or atleast hardly any. I have no pending files any more using Training plus Safe Mode.

[Coolio10]

-{ Quote: "I asked twice about this in Comodo forum, but nobody seems willing to reply.

Has anyone figured out whether there is really an AV signature update in Comodo? There is no signature version anywhere.

Check for updates doesn't seem to download signatures either.

IF (big if) there is a signature update, then it is during boot as Coolio said and behind the back of the user that can't verify anything. But i tend to find it odd to not be able to update manually too. I also blocked internet access during boot to see if it would try to update later. No connection was made. And i have had no pop up from Comodo during normal operation.

So, what's the deal with the AV scanner? I tend to believe that it doesn't update anything.

Ehm...Coolio maybe?" }-
I just guessed :D. Oh and people who think the virus scanner is useless it is not suppose to be full fledged av. It is the CAVS3 engine but since none of you read the forums you would not know.

I love the new antileak. I pass all tests on firewall leak tester with 2 or less alerts. So they must have done some internal changes too which is why the updater will not turn on anti-leak itself.

[Kees1958]

-{ Quote: "So they must have done some internal changes too which is why the updater will not turn on anti-leak itself." }-

Yep newest release is in fact RC3

[SystemJunkie]

-{ Quote: "Yep newest release is in fact RC3" }-
I have to agree actually I remain with old version.
Old brooms sweep better. ;D ;D ;D

Maybe I will give it a try again next release or on another system.

[Wordward]

You know, I think I'm beginning to trust Comodo less and less. They are a big business with making money as their goal, and to me this is slowly becoming more apparent. Although I won't argue that there is nothing wrong with a company wanting to make money. I somehow feel it has been their goal all along to woo us, pull us in, (and perhaps even use us as guinea pigs with these releases) and now no matter how inexpensive it sounds, they are asking for money to remove infections that none of us will probably ever incur. Say what you will, but Online Armor offers a free version with no strings attached and offers excellent support to boot. Which if you check out the Comodo forums as of late seems to be lacking. Just my opinion of course, but I have been around the block a few times at my age, and I am beginning to think the old addage "if it sounds to good to be true, then maybe it is" seems to be beginning to fit here a little more than it did before.

[Fuzzfas]

-{ Quote: "You know, I think I'm beginning to trust Comodo less and less. They are a big business with making money as their goal, and to me this is slowly becoming more apparent. Although I won't argue that there is nothing wrong with a company wanting to make money. I somehow feel it has been their goal all along to woo us, pull us in, (and perhaps even use us as guinea pigs with these releases) and now no matter how inexpensive it sounds, they are asking for money to remove infections that none of us will probably ever incur. Say what you will, but Online Armor offers a free version with no strings attached and offers excellent support to boot. Which if you check out the Comodo forums as of late seems to be lacking. Just my opinion of course, but I have been around the block a few times at my age, and I am beginning to think the old addage "if it sounds to good to be true, then maybe it is" seems to be beginning to fit here a little more than it did before." }-

There is certainly a discrepancy between older claims and current facts in Comodo policy. They used to say that they target the enterprise market, while now it turns that they want to introduce a paid service to home users that would want to. It's their right of course, but i too have become more cautious towards them. But, as long as i get it for free , it's light and doesn't phone home, i can live with it. I do think that their motives aren't as candid as they present them. I have also suspected that their lookup-submit policy, was made in order to obtain a vast library of applications. I mean, for example, the only way to have a "clean" My Safe Files folder, is to look them up. I was always curious about this. I mean, if you look the file up, it will disappear from the list and leave it tidy and empty. If you ARE certain it is a trusted application, there is no way to get rid of it from the list and put it to trusted. It will remain there to clog you list forever. I was always suspicious about that. I saw this as a subtle way to "encourage" you to sumbit files to them. Now you can avoid pending files alltogether, but clean PC mode, *is* the easiest mode to operate.

I am also baffled by the fact that the latest version introduces a scanner that apparently doesn't update its definitions. The weirdest thing, is that nobody in Comodo's forum seems to care. There are people that want to know about the engine used, its speed, others that complain that it doesn't work in Vista, others that would have liked a scheduled scan option etc. And nobody sees that if it doesn't update, it is worthless. So what good scheduled scans will do to you in one month from now, when it will have 1 month old definitions? People are weird... :blink: In fact, the only valid readon that i can find for the inclusion of this new, but "feature" in this version, is to launch the paid service. Because otherwise, for the non paying user, i can't see the use of a scanner that can't update its signatures. So, IMHO, adding in the change log a "NEW!" feature that is incomplete at best, only served as firework to introduce the paid service. It's their right of course, but i don't like such fireworks.

I am waiting for the final OA Free too and then will weigh my decision. Problem is OA eats a bit more CPU Time with p2p than Comodo and i hate the fact that doesn't tell me the destination IP.

We 'll see.

[Perman]

Hi,

I use Comodo firewall pro as a firewall only, nothing more. Its added features including recent one begging fees for its clean service is an indication that this app is drifting farther and further away its primary mission-protecting its users in Internet traffic control.

Whether this development is a healthy or corrupted one, time will tell. Meantime, as an end user, just needs to put your own guard up.

Take care.

[MikeNash]

-{ Quote: "
I am waiting for the final OA Free too and then will weigh my decision. Problem is OA eats a bit more CPU Time with p2p than Comodo and i hate the fact that doesn't tell me the destination IP.
We 'll see." }-

Sorry for off-topic-ness - but check the firewall status screen for destination IP address, and turn off firewall logging to avoid cpu use.

Mike

[Fuzzfas]

-{ Quote: "Sorry for off-topic-ness - but check the firewall status screen for destination IP address, and turn off firewall logging to avoid cpu use.

Mike" }-

Thanks Mike. I have thought about the firewall status screen, but in order to appear there, i must first accept the connection, right?

As for the log, i do have it disabled. I installed beta 74 25 minutes ago and i uninstalled it again. No log, but it's CPU time even with no p2p, was a bit higher. Not awfully high, but i saw oagui having periodic 0-3% spikes, while the gui was closed. In about 10 minutes, with just surfing, OAserv had about 00.00.14 CPU time and OAgui 00.00.10. After 1 hour with Comodo, cmdagent was 00.00.00 and cpf.exe was 00.00.14. (the oddest thing, the gui eating more CPU than the driver,but anyway). With p2p this gap will increase.

I know that it's not much CPU time anyway, it's just me being picky about it. I m spoiled from Kerio 2 that even with the heaviest p2p you have 00.00.00 after 12 hours. As if it wasn't working...

Now i ve put back Comodo with only firewall and leak protection on to see if it gets any lighter.

EDIT: Tried beta74 again. After launching all internet apps to create rules and rebooting for 2nd time CPU time is reduced. But for my taste there is always room for improvement.

[ggf31416]

-{ Quote: "I somehow feel it has been their goal all along to woo us, pull us in, (and perhaps even use us as guinea pigs with these releases) and now no matter how inexpensive it sounds, they are asking for money to remove infections that none of us will probably ever incur. Say what you will, but Online Armor offers a free version with no strings attached and offers excellent support to boot. Which if you check out the Comodo forums as of late seems to be lacking. ." }-

Nobody is holding a gun on your head to force you to buy their warranty and unlike e.g. Avira or Sanboxie they don't show you a big popup every day. Comodo is offering a full featured firewall and HIPS for free while Online Armor has many basic features disabled in the free version.

[Dieselman]

-{ Quote: "Hi,

I use Comodo firewall pro as a firewall only, nothing more. Its added features including recent one begging fees for its clean service is an indication that this app is drifting farther and further away its primary mission-protecting its users in Internet traffic control.

Whether this development is a healthy or corrupted one, time will tell. Meantime, as an end user, just needs to put your own guard up.

Take care." }-
So not true
No body can make you buy a product.

[Carver]

-{ Quote: "Hi,

I use Comodo firewall pro as a firewall only, nothing more. Its added features including recent one begging fees for its clean service is an indication that this app is drifting farther and further away its primary mission-protecting its users in Internet traffic control.

Whether this development is a healthy or corrupted one, time will tell. Meantime, as an end user, just needs to put your own guard up.

Take care." }-
I think most of the people that come to Wilders know what to do if the do become infected. At $79 us a year....my AV costs $39.95 US a year and it updates at least once a day. I use Comodo with D+, I like to have the most protection I can get. I haven't had a popup in days, unless I've installed a update for something. Really D+ is pretty quiet 8)

[Gizzy]

I heard that the firewall only option with leak protection disables some protections so you get less pop ups,

I did that same thing when I installed it on a friends pc I disabled most of defense +'s protection so that she wouldn't get many pop ups and now I was wondering what does comodo disable?

I think I disabled all of the protections except loopback, protected registry, protected files/folders, and termination protection,

I didn't notice some one say what it disabled in this thread so please excuse me if some one already answered this I could've missed it.

[alex_s]

-{ Quote: "Nobody is holding a gun on your head to force you to buy their warranty and unlike e.g. Avira or Sanboxie they don't show you a big popup every day. Comodo is offering a full featured firewall and HIPS for free while Online Armor has many basic features disabled in the free version." }-This is not true. OA free passes all the basic tests. So it is incorrect to say it has basic features disabled. It passes even more than basic tests, its free version is top at Matousec. Despite of the value of those tests it cannot be said OA free has basic features disabled.

[Dieselman]

-{ Quote: "This is not true. OA free passes all the basic tests. So it is incorrect to say it has basic features disabled. It passes even more than basic tests, its free version is top at Matousec. Despite of the value of those tests it cannot be said OA free has basic features disabled." }-
Protection feature are mostly there but read and compare. With OA free you get a good firewall with limited feature. With Comodo you get all features and more for free.

http://www.tallemu.com/comparisons.html

[Dieselman]

-{ Quote: "Thanks Mike. I have thought about the firewall status screen, but in order to appear there, i must first accept the connection, right?

As for the log, i do have it disabled. I installed beta 74 25 minutes ago and i uninstalled it again. No log, but it's CPU time even with no p2p, was a bit higher. Not awfully high, but i saw oagui having periodic 0-3% spikes, while the gui was closed. In about 10 minutes, with just surfing, OAserv had about 00.00.14 CPU time and OAgui 00.00.10. After 1 hour with Comodo, cmdagent was 00.00.00 and cpf.exe was 00.00.14. (the oddest thing, the gui eating more CPU than the driver,but anyway). With p2p this gap will increase.

I know that it's not much CPU time anyway, it's just me being picky about it. I m spoiled from Kerio 2 that even with the heaviest p2p you have 00.00.00 after 12 hours. As if it wasn't working...

Now i ve put back Comodo with only firewall and leak protection on to see if it gets any lighter.

EDIT: Tried beta74 again. After launching all internet apps to create rules and rebooting for 2nd time CPU time is reduced. But for my taste there is always room for improvement." }-
This has always been my problem with OA. Higher pings and slower web browsing.

[alex_s]

-{ Quote: "Protection feature are mostly there but read and compare. With OA free you get a good firewall with limited feature. With Comodo you get all features and more for free.

http://www.tallemu.com/comparisons.html" }-I can't deny this. Free Comodo is fully featured product and free OA is feature limited product. This is natural. Comodo is big company (I'd even say FAT company <smile>) and can afford to spend some money just to satisfy their ambitions. Tall Emu doesn't make a feeling of being too fat to make too much charity and is forced to sell their product. This is why I'll be with Tall Emu despite of anything Comodo will show. I like those brave men who risked to penetrate this very very crowded market and posess there an excellent place in such a short time with such a limited resources. Half a year ago I regarded them just crazy, but now I gave my heart to them :)

[Fuzzfas]

-{ Quote: "This has always been my problem with OA. Higher pings and slower web browsing." }-

Well, CPU Time doesn't have anything to do with ping or browsing. To tell the truth, i can't complain about browsing speed with OA. I haven't noticed any slowdown.

[Fuzzfas]

-{ Quote: "I can't deny this. Free Comodo is fully featured product and free OA is feature limited product. This is natural. Comodo is big company (I'd even say FAT company <smile>) and can afford to spend some money just to satisfy their ambitions. Tall Emu doesn't make a feeling of being too fat to make too much charity and is forced to sell their product. This is why I'll be with Tall Emu despite of anything Comodo will show. I like those brave men who risked to penetrate this very very crowded market and posess there an excellent place in such a short time with such a limited resources. Half a year ago I regarded them just crazy, but now I gave my heart to them :)" }-

I will agree that morally speaking, i support OA's behaviour more. They had the same policy since the beginning, clear goals, gave a nice firewall-HIPS for free, didn't resort to slanderous comments to strike their competition and on the contrary have received such attacks. I see Tall Emu as the underdog and i always sympathize for the underdogs.

[alex_s]

-{ Quote: "I will agree that morally speaking, i support OA's behaviour more. They had the same policy since the beginning, clear goals, gave a nice firewall-HIPS for free, didn't resort to slanderous comments to strike their competition and on the contrary have received such attacks. I see Tall Emu as the underdog and i always sympathize for the underdogs." }-Interestion opinion. I'm not native speaker so I'm not sure I've got you right. Does "underdog" == "small company" ? For me "underdog" is rather a company that was big once and then went small :)

[MikeNash]

-{ Quote: "Interestion opinion. I'm not native speaker so I'm not sure I've got you right. Does "underdog" == "small company" ? For me "underdog" is rather a company that was big once and then went small :)" }-

The underdog is the team that is popularly expected to lose in a contest :)

[SystemJunkie]

-{ Quote: "You know, I think I'm beginning to trust Comodo less and less. They are a big business with making money as their goal, and to me this is slowly becoming more apparent." }- Thats why I always disable cpfupdate ;D
but not because I don´t trust comodo either because malware could hijack this process.

And I saw how empty process (Windows Operation System) went without asking into Network Security Policy. I deleted all those Ghost entries.

-{ Quote: "Nobody is holding a gun on your head to force you to buy their warranty and unlike e.g. Avira or Sanboxie they don't show you a big popup every day. Comodo is offering a full featured firewall and HIPS for free while Online Armor has many basic features disabled in the free version.
Reply With Quote" }-Exactly. Actually state of the art.

-{ Quote: "Protection feature are mostly there but read and compare. With OA free you get a good firewall with limited feature. With Comodo you get all features and more for free.

http://www.tallemu.com/comparisons.html

This has always been my problem with OA. Higher pings and slower web browsing." }-
-{ Quote: "
I can't deny this. Free Comodo is fully featured product and free OA is feature limited product. This is natural. Comodo is big company (I'd even say FAT company <smile>) and can afford to spend some money just to satisfy their ambitions. Tall Emu doesn't make a feeling of being too fat to make too much charity and is forced to sell their product. This is why I'll be with Tall Emu despite of anything Comodo will show. I like those brave men who risked to penetrate this very very crowded market and posess there an excellent place in such a short time with such a limited resources. Half a year ago I regarded them just crazy, but now I gave my heart to them " }-Yep many disadvantages that nobody wants to take so comodo is nr.1 and remains nr.1.

[Fuzzfas]

-{ Quote: "Interestion opinion. I'm not native speaker so I'm not sure I've got you right. Does "underdog" == "small company" ? For me "underdog" is rather a company that was big once and then went small :)" }-

Don't worry, i 'm not exactly native speaker either. Underdog or "dark horse" is as opposed to favourite.

http://www.answers.com/topic/underdog

I mean, you have a small, i suppose, company from Australia, that in a few months come out of the blue and gives a firewall that even in its free edition, wins the first place at matousec and puts all the "old and well-known" companies behind. Not only, but manages to come up with a firewall-HIPS combination that is more user friendly than most hips. How many firewalls of that security level do you know that auto-open ports for example that for not experienced people is a blessing? Personally i prefer controlling myself if a port is allowed to open (i actually prefer Comodo's predefined policies or Kerio's 2 on the fly rule creation) , but there are many people that will see this as a relief.

So, really, this firewall out of nowhere, can beat most commercial firewalls. You can bet that there are many competitors out there that don't like Mike Nash one bit. ;D Many won't like Comodo's CEO either, but because there has been a direct clash between the two parts too, i generally appreciated Mike Nash's stance on this issue. He has responded to all attackes (from any part) that i have seen, with dignity. Even in OA's forum there is a quality difference with the way he handled the clash with Comodo. Nash replied in a topic and he locked it, so that we others can't transform it into a Comodo bashing thread. I *think* (not sure) he also deleted another thread someone started about the same issue. Not all behave like him.

[Fuzzfas]

-{ Quote: "Thats why I always disable cpfupdate ;D
but not because I don´t trust comodo either because malware could hijack this process.
" }-

After the ZA-phoning home era, i don't trust anyone but myself. ;D

I don't have anything against Comodo, i am using it right now. But, i do have to say that their last firewall release, didn't seem to me 100% coherent with their preaching. I would have appreciated much more and felt much more comfortable to trust them, if , when they came out with Comodo they were answering to the "Why free" question, more directly: Meaning, admitting that they want to create a pool of users, a database of safe applications, sell services to enterprises AND eventually to the home users that want to as well. If not for anything else, because the CEO has an almost dramatic way of saying things, sometimes i thought i was reading the Messiah of internet Security, while, at the end, it is proven that "his kingdom, IS of this world too". This is further proved from the fact that the implementation of the non updatable virus scanner in this release, served only to launch the paid service. Because i can't see any other reason to implement a new feature like a scanner, that can't update. You release the version on 5 February? On 6, the scanner is already getting obsolete, on 13 it will be rather old, on 23 it will be quite useless. The feature IMHO is a "theoretical" feature that could have waited until it made more sense, but they didn't wait because they wanted to launch the paid service. So they added 20 MB of dead weight on the installer because they needed to launch the paid service. I mean, it's their product, they write the EULA and it's fine, i just don't take what they say about their motives as gold anymore and don't get impressed by big words and political-like manifestos.

-{ Quote: "
Yep many disadvantages that nobody wants to take so comodo is nr.1 and remains nr.1." }-

Not all people are Wilders' members. Comodo has its own disadvantages. OA is easier to use. If it was on par in CPU Time, i would be using it probably. Comodo has some nice features, but it's so fragmented, that can make a newbie user get dizzy. If i had to choose a firewall for my dad between OA and Comodo, i would certainly choose OA, because poor man, he wouldn't have a clue on what Comodo is doing.

[alex_s]

-{ Quote: "Not all behave like him." }-Thanks. Now I hope I understand what did you mean. And if I do, this is very close to what I personally think but cannot express :)

[Fuzzfas]

-{ Quote: "Thanks. Now I hope I understand what did you mean. And if I do, this is very close to what I personally think but cannot express :)" }-

You 're welcome. Yes, i think we are saying the same thing. :)

[Dieselman]

The problem with Comodo is that it is clearly not for beginners. It is a full featured Firewall with great HIPS. It takes some learning and patience but it comes with a great help file system which has always been lacking in OA. If you want simple then use ZA or maybe OA free. If you take the time to learn and read and understand Comodo you will be fine. The latest version solves the pending files problem. If you use Clean PC Mode in D+ you will get pending files. Any other mode will not give you pending files. The D+ alerts are clear to understand.

[SystemJunkie]

-{ Quote: "After the ZA-phoning home era, i don't trust anyone but myself.

I don't have anything against Comodo, i am using it right now. But, i do have to say that their last firewall release, didn't seem to me 100% coherent with their preaching." }- Personally I distrust anything that comes from theplanet.com. I think so, the last version is extremely strange.

I like firewalls but now I understand why hoglund said firewalls are a joke. Someone tried Shark 3 against Comodo, if you allow access to service control, Comodo has lost and becomes TOTALLY useless. (keyloggs work with ease, firewall don´t take notice of outbound activities and so on.. full range kernel level unhooking=full firewall/hip bypass)

They (firewalls) need inner core protection even if things are allowed otherwise joke-like toys.

[twl845]

-{ Quote: "The problem with Comodo is that it is clearly not for beginners. It is a full featured Firewall with great HIPS. It takes some learning and patience but it comes with a great help file system which has always been lacking in OA. If you want simple then use ZA or maybe OA free. If you take the time to learn and read and understand Comodo you will be fine. The latest version solves the pending files problem. If you use Clean PC Mode in D+ you will get pending files. Any other mode will not give you pending files. The D+ alerts are clear to understand." }-
I went to CFP v2.4 because it is simple enough to use that even a firewall newbie can use it. After about 2 years of waiting for v3 it finally arrived, and I did the upgrade only to be transported to a FW with too many options to consider like what's the best mode to put it in for me. Should I install with D+ or not. Then I was confronted with the insurmountable bugs that didn't allow me to continue. I guess by now they have corrected the bugs, but my needs are simple and I don't require that complicated a FW. I tried OA after reading comments in Wilders, and it fits like a glove. No BS just a well organized FW. As for their help file being lacking, you should check the web site and access the new help file. Put it in your Favorites and access it as you need it. It's nice. I'm patiently waiting for the new release which is reported to have made some decent improvements. ;D

[Wordward]

Is it me, or has any mention of Comodo Pro being easy to use even for the novice completely gone now on their website? I know this was mentioned on the "old" website download page that has now been replaced by the more marketable give us your money version. Also I think something was mentioned in the previous versions release notes about how the firewall's learning mode enables "gamers" as well as novice users to configure their firewalls easily. I googled "Comodo Pro Firewall 3.0 for novice users" and it seems many websites claim it is indeed for novice users as well as advanced ones. I just wonder what Comodo has to say about the firewall being for novice users now? Can anyone find anything on this?

[LowWaterMark]

Folks, let's focus this thread back to "Comodo 3.0.16.295" specific posts, and stay away from any additional comparisons between CPF and other products, or any discussions about how the various companies manage their product marketing differently.

A couple replies about other products have been removed.

[Dieselman]

Your statement about "give us your money" is false. Comodo Firewall is FREE and will remain free forever. Comodo is offering an OPTIONAL protection service if you choice to use it. It is clearly not part of the firewall. Its like when you buy a car and the saleman offers you an OPTIONAL extended warranty. Does it mean you have to buy it. NO. Thats what optional mean. As far as easy to use this is the case if you dont use Clean PC Mode.

[Perman]

-{ Quote: "The problem with Comodo is that it is clearly not for beginners.
" }-
Hi,

I think this one needs to be rephrased.

I have installed Comodo firewall w/o defense+ for some high school kids--most are first year pc users. They like it, enjoy it, and are very grateful. Therefore, I say Comodo firewall is clearly for beginners, if you make it to work to that effect.

As to the optional warranty service , IMO, it has clearly pushed Comodo out of elite class--quality freeware offers quality free service. It is a shame, why on earth, the CEO would allow this to happen ? is he a changed man now? where is his respectful missions ? He must have had too much of LOUIS thirteen.

Take care.

[Dieselman]

-{ Quote: "Hi,

I think this one needs to be rephrased.

I have installed Comodo firewall w/o defense+ for some high school kids--most are first year pc users. They like it, enjoy it, and are very grateful. Therefore, I say Comodo firewall is clearly for beginners, if you make it to work to that effect.

As to the optional warranty service , IMO, it has clearly pushed Comodo out of elite class--quality freeware offers quality free service. It is a shame, why on earth, the CEO would allow this to happen ? is he a changed man now? where is his respectful missions ? He must have had too much of LOUIS thirteen.

Take care." }-

You are installing it without D+ so of course its easier. If you disable D+ then its like any other firewall. I only use Comodo with full features.

[Hermescomputers]

People what's wrong with paying for services or for products for that matter?

Perhaps the only thing that should be free in this world is the work YOU are doing... since it's not so ok for others to earn a living by earning some $$$...

Please do make a distinction between, a worker being worthy of his hire, and GREED!

A thought to ponder! :)

[Fuzzfas]

-{ Quote: "People what's wrong with paying for services or for products for that matter?

Perhaps the only thing that should be free in this world is the work YOU are doing... since it's not so ok for others to earn a living by earning some $$$...

Please do make a distinction between, a worker being worthy of his hire, and GREED!

A thought to ponder! :)" }-


There's nothing wrong in using a free product in order to make a user pool to which later try to sell services. What bothers me more, is that they don't say it clearly.

Read this:

"All we want from our users is their trust!" (And possibly their money, why not say it, it's not something to be ashamed about!)

"We are doing that by building, for our users, unmatched Desktop security products so that they will never have to worry about

1)Which security product they should buy

2)Where they should buy it from

3)How much they should pay for it.

Because we will provide them all of the security products they will need, for free, we are hoping that we will gain our user's trust so that we can be a big brand and this will help our other services that we sell to enterprises!"

Cough...And AV-SMART Warranty... cough! Why not say it? It's not like this that you build trust!


http://forums.comodo.com/melihs_corner_ceo_talkdiscussionsblog/give_all_that_for_free_whats_the_catch_how_does_comodo_make_money-t764.0.html



Also, don't you find this a bit over-dramatic?

http://www.melih.com/2008/02/04/enough-is-enough-time-for-accountability-for-the-desktop-security-industry/

Note statements as " First time ever, A security vendor will give you a peace of mind from malware!"

If i get infected and loose data i will have peace of mind knowing that Melih will clean the PC after the disaster? These are statements of a PC Messiah.

"-> First time ever, A security vendor will put itself between you and the malware!"

Another dramatic statement... As if now there is also Melih's HIPS running on top of the firewall. So the malware must pass personally from Melih too in order to wreak havoc to my PC... :what:

" IT STOPS TODAY, RIGHT HERE, RIGHT NOW!"

We shall defend our island, whatever the cost may be. We shall fight on the beaches, we shall fight on the landing-grounds, we shall fight in the fields and in the streets, we shall fight in the hills. We shall never surrender! :o


I suppose it is a matter of style. I would have prefered a less "messianic" and more earthly and honest approach. Like "We make money from selling certificates to enterprises. We decided to make a free firewall project, because we think it is good for pubblicity, we will make a large pool of users and file database, that we can later use at whatever project we like. Hopefully, our sales to enterprise partners will rise and we intend to offer some paid services through our free product to those that will want them. In this way we will be able to gain some of the money we gave for the development of Comodo firewall."

Isn't this what many other vendors have the honesty to say? Isn't that what PrevX was saying? Isn't that what Threatfire does? The only difference is that they say "We have a paid version too", they say "We have an extra feature that you pay for too".

Anyway, it's their policy. I would simply keep my statements more "earthly" and straightforward. It is a matter of taste maybe.

[Hermescomputers]

Ok... So they changed their melody a bit... But the firewall is still free.
The paid "Service" they offer (If it survives) could hurt businesses like mine but it doesn't scare me much because I have being doing this for many years... And I know that making promises about "Keeping" anyone clean is impossible to keep... I have noticed over the years that often New players or dying ones often pull these types of move before they disappear into tin air...

However, charging for the services and averaging the losses across many users might hopefully allow them to deliver it that cheap... But trust me, I know from experience this wont last. :)

So instead of being worried... I crack a smile and happily cheer them on :D

The firewall by the way is exceptional software for the price... I was hoping users would have demonstrated a bit more gratitude for it though.

[WilliamP]

In comparison to some of the other softwares that I have had ,I have no problem at all. I had the old Diamond trojan fighter. That I paid for and it very unexpectedly went by by. At least we have a very good piece of software that works and didn't cost anything. I have had at least 3 other firewalls that I paid for and didn't like. And as far as their making money,fine. I don't have to participate if I don't want to but I can keep the program. You can't beat that with a stick. Money is what makes things happen. The majority of the software I have I pay for because I felt that it was better than what I could get for free. I hope that everything works for COMODO so they can continue to provide me with a great firewall.

[jrx10]

So what's the bottom line with Version 3.0.16.295? 1) It can't be installed as an upgrade to the earlier 3.0 install? 2) It has an on-demand virus/malware scanner that the previous version didn't have. 3) It's defense + has been reworked for less pop-ups/configuration problems 4) you can purchase this optional ""protection service to get professional help in basically solving Virus/malware removal and other CFW related issues? My questions are 1) is the Version 3.0.16.295 FW and Defense + basically the same as in the older 3.0 version but with some factory setting adjustments changed so out of the box it's less of a pain to configure, or is this a whole new FW/HIPS engine that should've been called Comodo 3.4 or 4.0 instead of 3.0 version ---? I've got 3.0 on another HD (2.4 on this one because of nasty KAV problems when I tried it with 3.0) All with confirmed separate images up from the basic XP build. I really didn't see any problems with the previous version of the 3.0 (with XP), but I've only used it 3-4 hours and I actually liked all of the "well-explained" PUs because it lets me learn what a program accesses when it's opened or when a program accesses something different in the background. I'm just guessing, but it's probably that CFW is the hot item, and C-A/V and C-AM just aren't a hot ticket right now and Comodo is trying to get them more exposure by including an on-demand scanner in the CFW. I've got no problems with this as long as the on-demand AV doesn't take up any extra resources, doesn't constantly annoy you with PUs that it's definitions are out-of-date, and isn't configured to bypass CFW to automatically get updates w/o asking you. What I really would like to know is ---Is this a whole different FW/HIPS engine or is it just some factory-initial-install settings adjustment in the older 3.0 version and with an A/V on demand scanner and an optional service-agreement thrown in----Excluding the extraordinary high # of PUs & pendings, is this new version a better self-protected FW & HIPS or just more user-friendly? And btw, can you import your FW & HIPS settings from the previous 3.0 build?

[BuzzStone]

It's basically just more user friendly. I'm not sure about importing rules but I think you can. As far as the warranty thing goes, like you said, it's optional. Lots of people can/will benefit from such a service. I don't understand why some people have to bash something that has no effect on them at all. Comodo is arguably the best firewall available period, and it's free.

[Dieselman]

-{ Quote: "It's basically just more user friendly. I'm not sure about importing rules but I think you can. As far as the warranty thing goes, like you said, it's optional. Lots of people can/will benefit from such a service. I don't understand why some people have to bash something that has no effect on them at all. Comodo is arguably the best firewall available period, and it's free." }-
Thank you........................

[jrmhng]

-{ Quote: "

Isn't this what many other vendors have the honesty to say? Isn't that what PrevX was saying? Isn't that what Threatfire does? The only difference is that they say "We have a paid version too", they say "We have an extra feature that you pay for too".

Anyway, it's their policy. I would simply keep my statements more "earthly" and straightforward. It is a matter of taste maybe." }-

It sounds like they are offering a paid service where the others mentioned are paid products.

[Fuzzfas]

-{ Quote: "It sounds like they are offering a paid service where the others mentioned are paid products." }-

These are semantics. Do you pay for TF? No. They tell you that they have a PRO version. In Comodo the "PRO" version , has 1 year virus cleaning. But they don't call it PRO... It's the service that changes. But basically, they give you something for free, hoping to get something more. When PrevX 1 came out, they weren't charging anything. Their "profit" was from the comunity reports, which helped them build a database (same that Comodo does with file submission). PrevX didn't come out with dramatic statements that they are saving the world.



Anyway, as i said, it is a matter of style. I don't like drama queens. What should open source developers do then? Apply for Sainthood? They would be much more entitled to bold statements, since they honestly don't make a single cent from their development.

In any case, just because they give something for free, doesn't mean that they buy my conscience or opinion. Just like they don't force me to pay, they don't force me to become their opinion slave or fanboy either. It's their choice to have their policy, it's mine to have my opinion.

[SystemJunkie]

Actually I managed to install the 3.0.16 version and it works seamless.

[Pedro]

-{ Quote: "
Anyway, as i said, it is a matter of style. I don't like drama queens. What should open source developers do then? Apply for Sainthood? They would be much more entitled to bold statements, since they honestly don't make a single cent from their development.
" }-
"open source" (free software) developers don't starve.
-Some develop for the joy of developing, use the programs themselves, and at the same time share the program along with the source, giving full freedom for others to change the program and share themselves. The program ends up better almost as a side effect. It's all about cooperation and freedom.
-Others get paid for it.
-Others just plain sell it. Yes, you can sell free software. You just have to give the source code, let ppl change it and distribute it themselves, in order to be called free software. Free as in free speech, not free beer.

[jrmhng]

-{ Quote: "In any case, just because they give something for free, doesn't mean that they buy my conscience or opinion. Just like they don't force me to pay, they don't force me to become their opinion slave or fanboy either. It's their choice to have their policy, it's mine to have my opinion." }-

I just think a lot of people are being hard on them. They are giving away a great free firewall. Recently they are just trying to sell a service. Yes announcement was over the top but why should that change things?

[twl845]

-{ Quote: "I just think a lot of people are being hard on them. They are giving away a great free firewall. Recently they are just trying to sell a service. Yes announcement was over the top but why should that change things?" }-
Right. If folks don't want the service they can click no and continue to enjoy the free firewall. :)

[virtumonde]

I don't get it what is the big deal either.Are the features of the cfp .pro cutt down if u don't choose av-smart?No they are not,it is the same powerfull product.

[Victek123]

-{ Quote: "So what's the bottom line with Version 3.0.16.295? 1) It can't be installed as an upgrade to the earlier 3.0 install? 2) It has an on-demand virus/malware scanner that the previous version didn't have. 3) It's defense + has been reworked for less pop-ups/configuration problems 4) you can purchase this optional ""protection service to get professional help in basically solving Virus/malware removal and other CFW related issues? My questions are 1) is the Version 3.0.16.295 FW and Defense + basically the same as in the older 3.0 version but with some factory setting adjustments changed so out of the box it's less of a pain to configure, or is this a whole new FW/HIPS engine that should've been called Comodo 3.4 or 4.0 instead of 3.0 version ---? I've got 3.0 on another HD (2.4 on this one because of nasty KAV problems when I tried it with 3.0) All with confirmed separate images up from the basic XP build. I really didn't see any problems with the previous version of the 3.0 (with XP), but I've only used it 3-4 hours and I actually liked all of the "well-explained" PUs because it lets me learn what a program accesses when it's opened or when a program accesses something different in the background. I'm just guessing, but it's probably that CFW is the hot item, and C-A/V and C-AM just aren't a hot ticket right now and Comodo is trying to get them more exposure by including an on-demand scanner in the CFW. I've got no problems with this as long as the on-demand AV doesn't take up any extra resources, doesn't constantly annoy you with PUs that it's definitions are out-of-date, and isn't configured to bypass CFW to automatically get updates w/o asking you. What I really would like to know is ---Is this a whole different FW/HIPS engine or is it just some factory-initial-install settings adjustment in the older 3.0 version and with an A/V on demand scanner and an optional service-agreement thrown in----Excluding the extraordinary high # of PUs & pendings, is this new version a better self-protected FW & HIPS or just more user-friendly? And btw, can you import your FW & HIPS settings from the previous 3.0 build?" }-


I don't believe it's a different engine, however the option to make the firewall "leak-proof" without relying on Defense+ is made available during the install. From what I read on the comodo forum if you update from a previous version using the built-in updater you can't configure the firewall in this way even though you wind up with the same version. If you use Defense+ it doesn't matter, but if you don't use it then the firewall "leaks".

[jrx10]

-{ Quote: "I don't get it what is the big deal either.Are the features of the cfp .pro cutt down if u don't choose av-smart?No they are not,it is the same powerfull product." }- OK, so exactly what has changed in the new CFW-3 besides the 1) service-agreement and 2) the virus-malware scan? and if this is all that's changed, why couldn't you just update a previous version of CFW 3 with these 2 extra features? I DL it to a clean image of XP, declined the service-agreement, and imported my previous CFW-3 settings (stored on a separate partition), into the ""new CFW 3 w/o any problems. Ran the AV/AM scan, and it came up with nothing (which was expected since this was an updated base-xp except for ATI). So what is the difference (if any) in CFW/Defense+ ? Do you still need Boclean for real-time protection, with the CFW HIPS as well as the on-demand AV-AM scanner? I didn't look real close, but will you need to update the AV/AM scanner (or should I updated it before the scan) or is this just an initial one-time shot included in the new CFW-3 to make sure that people that get the service-agreement have a fairly clean system (as possible) on the initial install? And how good is this new AV/AM scanner compared to running an one of the AV manfs on-demand scanners and afterwards running SAS/SBSD/ or one of the other anti-malware scans? -{ Quote: "I don't believe it's a different engine, however the option to make the firewall "leak-proof" without relying on Defense+ is made available during the install. From what I read on the comodo forum if you update from a previous version using the built-in updater you can't configure the firewall in this way even though you wind up with the same version. If you use Defense+ it doesn't matter, but if you don't use it then the firewall "leaks"." }- Ok, so if you use the FW only (w/o the HIPS) you need the new CFW-3 so it doesn't leak, but if you use the old CFW 3 with Defense +, it doesn't matter? Is that what they're saying? thx btw, CFW 3 has so many options for both the FW and Defense +, that I'm thinking about printing out CFW-3's tutorial, sitting down for a couple of hours and reading their (imo) excellent help section while making notes on the side, since I'm just a rook compared to most of the guys I see posting. It looks like the CFW 3.0 help section is a great FW tutorial just in itself.

[Dieselman]

Read this. No reason not to use D+.



http://forums.comodo.com/feedbackcommentsannouncementsnews/comodo_firewall_pro_3016295_released-t19142.0.html

[Victek123]

-{ Quote: "Ok, so if you use the FW only (w/o the HIPS) you need the new CFW-3 so it doesn't leak, but if you use the old CFW 3 with Defense +, it doesn't matter? Is that what they're saying?" }-

Yes, I believe this is correct. In the versions previous to 3.0.16.295 the Defense+ module enabled the app to pass the leak tests. If you turned Defense+ off CFP failed the tests. When I did a "clean install" of this new version on XP there was an option to "leak proof" the firewall without enabling Defense+. I haven't run leak tests on my system yet to confirm this though.

[Dieselman]

-{ Quote: "Yes, I believe this is correct. In the versions previous to 3.0.16.295 the Defense+ module enabled the app to pass the leak tests. If you turned Defense+ off CFP failed the tests. When I did a "clean install" of this new version on XP there was an option to "leak proof" the firewall without enabling Defense+. I haven't run leak tests on my system yet to confirm this though." }-
I got the GRC leak test,PC Flank test and the System Shutdown test to pass using D+. I really dont know why anyone doesnt want to use D+.

[jrx10]

-{ Quote: "When I did a "clean install" of this new version on XP there was an option to "leak proof" the firewall without enabling Defense+." }- Was this a "selective install" option, only available if you didn't want to install the defense + ? I just don't don't remember seeing it, but I was watching a CBB game while reinstalling (mounting it--whatever), the OS image and installing the new CFW 3.0. ...... so now if have "the new CFW 3.0 (why didn't they just call it 3.4?), and you have defense + installed but later want to turn it off and just use the FW (if you decide to run another HIPS for instance),----- are you screwed with a ""leaky FW, because you didn't select to enable "leakproof the FW without enabling defense + ? ;D Perhaps, I should make another image with the "new" CFW 3.0 installed without the HIPS and the "leakproof the FW without enabling defense +" checked. Luckily we had a 500 gig HD advertised at a good price in the Sunday paper. I'm going to need it to hold all the images after this "new and improved CFW 3.0" rollout.

[Coolio10]

-{ Quote: "Was this a "selective install" option, only available if you didn't want to install the defense + ? I just don't don't remember seeing it, but I was watching a CBB game while reinstalling the OS image and installing the new CFW 3.0. ...... so now if have "the new CFW 3.0 (why didn't they just call it 3.4?), and you have defense + installed but later want to turn it off and just use the FW (if you decide to run another HIPS for instance),----- are you screwed with a ""leaky FW, because you didn't select to enable "leakproof the FW without enabling defense + ? ;D Perhaps, I should make another image with the "new" CFW 3.0 installed without the HIPS and the "leakproof the FW without enabling defense +" checked. Luckily we had a 500 gig HD advertised at a good price in the Sunday paper. I'm going to need it to hold all the images after this "new and improved CFW 3.0" rollout. " }-
The antileak mode only becomes visible once selecting basic only during the install. This could be problematic to some not knowing there is an easier but still strong mode. I am using the new antileak mode which still uses defence+ but has a lot less popups and still passes all the tests on firewall leak tester. I tested all the tests and i pass all of them with 2 or less alerts which is a drastic change i would say. There must also be some internal changes to cause less popups because the file/reg protection shows less alerts to.

[jrx10]

-{ Quote: "The antileak mode only becomes visible once selecting basic only during the install. This could be problematic to some not knowing there is an easier but still strong mode." }- From what I'm gathering, but I may be completely off-base as well, --if you install the "new" CFW "with everything on it", but later decide to run it without D+, you'd be better off uninstalling it completely, and then reinstalling it in the "anti-leak"mode without D+? Is that the program? thx

[Coolio10]

-{ Quote: "From what I'm gathering, but I may be completely off-base as well, --if you install the "new" CFW "with everything on it", but later decide to run it without D+, you'd be better off uninstalling it completely, and then reinstalling it in the "anti-leak"mode without D+? Is that the program? thx" }-
Yup ya rite

[Gizzy]

does any one know what the difference is between the anti-leak mode and the defense+ mode?

like what monitoring protections get shut off or are left on?

[ggf31416]

-{ Quote: "
like what monitoring protections get shut off or are left on?" }-

http://www.wilderssecurity.com/showpost.php?p=1177133&postcount=67

[Gizzy]

-{ Quote: "http://www.wilderssecurity.com/showpost.php?p=1177133&postcount=67" }-
Thank you, :thumb:
I must have missed that post.