COMODO Internet Security 4.0.141842.828 Released

The global 'Allow All' outbound firewall rule can (and should IMO) be deleted easily.The purpose behind it is pop-up reduction but at the expense of security.

 

Hi smage,i've used the web installer.Not for the whole suite,just fw and defence+.

 

i have CIS (no av) running in a VM and am messin around with the sandbox aspect. is there somewhere to see what's running in the sandbox besides the logs?? like sandboxie does??

thanks

 

i believe in the D+ logs

 

I believed the contrary: in 4, if I delete this rule, every application must alert and ask to me the permission, is it ?

 

yes, in way that is right.

 

if you set the sandbox setting to automaticlly trust files from installers, does that mine you can install fake av etc. and they will be ran outside the sandbox?

what happens if someone make a mistake then the sandbox allow the malware out because of that setting?

 

The only thing I know is that CIS can make a mistake and that you'll be better of security wise that way, prob. without many issues. Issues that occur can easily be fixed by just adding to the list of My Own Safe Files.

 

but what about malware, i mean if someone installs a software thinkings it good when it not then it will bypass the sandbox? but if you select deny then it move the sandbox right? and allow lets it outside the sandbox?

im talking about the D+ elevated admin prompt you get with the sandbox alert with installers.

 

Ah, well I guess in that case the software in question would obviously not run proper if at all, be it malware or legit.

 

this apreach is confusing i guez that is when signiture is needed

 

I installed today the entire suite with web installer,and again,no problems with some gray out option.

 

Ya Brocke, sorry in my previous post I misunderstood your firts answer:I was sleeping again and I read " should NOT IMO ".

Actually, we think the same.

 

A problem with 4...828 ( I tried all the types of installers ): after the reboot, I set it as I used with the previous versions until 3,14 = Defense+ in Paranoid Mode, and in the highest settings possible, and I disable the sandbox.

After the following reboot, in the notification area of the tray bar disappears some icons: Avira ( I use it and disable Cav, no problem until 3,14 ), Incredimail and others applications that usually I see in the notification area.

I tried to restore them from the tray bar propriety, but it's impossible. After other reboot, nothing happens. Avira runs ( I see it in the Task Manager and I tried Eicar test ), Incredimail too, but no icons in tray bar.

And I'm not sure that Avira runs perfectly.

 

Hi I used the offline installer, maybe that's why there is a difference.

 

I installed just the firewall in a VM recently. I'm having a problem with the firewall initially blocking the internet connection. I have to turn it off to open the connection. Then I can turn it back on and set it to SAFE or Training. The next time I boot the VM I have to do the same thing again. Any idea how to resolve this? TIA

 

That's correct.Opinions may differ but I like to decide if and when software 'phones home'.

 

Don't worry no rogue will have a trusted installer and signed processes.

 

Hehe... I've thought about this A LOT. My conclusion was the best quote in history in this area: better safe than sorry.

 

It's making the connection unresponsive? What do the logs say that it is blocking?

 

.
When you say "logs" do you mean "firewall events"? There is nothing listed there. I just started the VM and again the connection is completely blocked.

Regarding "My Configurations" (right-click menu on the tray icon) what is the difference between Firewall, Internet and Proactive Configurations?

 

Hi smage.I guess so.That means it's more appropriate to use the web installer,till the bug is fixed for the offline one.

 

They had that feature in the beta but it was removed.

 

now why on earth wuld they remove a feature like that... if anything that seems like something they would want to add into it...

 

Well, that plain sucks. You should be able to right click on the tray icon and select "programs running in sandbox" and have it show you like sandboxie. Also some type of "border" again like sandboxie showing you say - your browser is sandboxed. Only makes sense.

CIS - alot of potential there but needs additions as i mentioned above before i will use it.