info sharing

I believe comodo internet security Create a good security for pc.
because comodo have best HIPS & automatic sandbox.

But i noticed a problem.

I run 15 new trojan and worms outside the sandbox in my PC and comodo request their trojan request connect to internet. for example trojan.exe request connect to internet and me allow all request connect.(my setting firewall was custom).

Then the trojans and worm began their activity. But comodo Was not any warning and No connection was blocked by comodo !

and then run trojans in other pc that Kaspersky was installed , and allow trojans to connect internet then kaspersky detect network attack and block some connection.

Please read this:

http://forums.comodo.com/firewall-help-cis/tcpudp-flood-protection-is-removed-t62969.0.html

Now On the other hand comodo can not create automatic network policy for known & unknown application. for example yahoo messenger network policy is allow all request !

http://up.iranblog.com/images/uxcglo2rdxv98z2ph5zn.png

http://up.iranblog.com/images/3f2sy3b389b346gyr2.png

But outpost ! for example yahoo messenger network policy is automatic and Accurate . ports policy & Separation video chat voice chat policy &....

well. Now i think comodo is a low level network control and cant analyzes network traffic.

Have a nice time

 

Once you allow it then Comodo assumes that is what you want and let it be. I suspect you will get similar with Kaspersky, or any other FW that allow users to use their brain, if you set it in similar manner. Equally you can set Comodo to make decisions for you

 

I understand your answer.

I know COMODO can block trojan request connect by user. But i said when allow this request comodo cant Analysis for network attack detection.

Why ? ===> TCP/UDP flood protection is removed ? It was completely removed.

and I said On the other hand network policy for app is allow all request ! it is awful.

If Comodo can block network attack when the traffic created , please show one report network attack detection by comodo.

we can test kaspersky network traffic analysis here:

http://support.kaspersky.com/kis2011/settings/ids?qid=208281825

And i can show real test.

thanks Cudni

 

I always thought that Comodo will not bother with the traffic you allow (why should it, possibly design feature). As for that feature change (flood protection) I doubt it I'll ever feel the lack of it. Thanks for mentioning about it though.
If you are convinced that somehow you found a bug while there is nothing wrong with your setup then raise the issue further in their forums