Opinions of Comodo Firewall Pro 3.

So here i begin my opinion .

Comodo is a free firewall with a lot of features most paid firewalls do not have.
Those features are just not appreciated because comodo stuffs them away or presents them in an advanced way.

 

yes i use comodo and is cool
but i found a lack , the log
you can't make filter about program , or track a log about a software
you can't filter the only incoming connection and so on
it can log only the global rule

 

IMO comodo does have a learning curve as do most FW's, but if you do get a pop up and do not know what it is or how to handle it and decide to block it! just take the extra steep and uncheck the remember box and that way if it is some thing that is needed all that has to be done is restart the computer and comodo will no be blocking what ever you told it to block.. but after comodo learns your sys it is very quit and a very nice FW

 

I agree on.

Set Comodo Firewall 3 Defense+ to Train with Safe Mode It will then learn all your programs, and will be very quite, while maintaining MAX protection!

3xist.

 

Hey 3xist. Train with Safe Mode is NOT the same as Training Mode. You will get alerts if you use Train with Safe Mode. Read the help file system to understand the differences.

Train with Safe Mode: While monitoring critical system activity, the firewall will automatically learn the activity of executables and applications certified as 'Safe' by Comodo. It will also automatically create 'Allow' rules these activities. For non-certified, unknown, applications, you will receive an alert whenever that application attempts to run. Should you choose, you can add that new application to the safe list by choosing 'Treat this application as a Trusted Application' at the alert. This will instruct the firewall not to generate an alert the next time it runs. If your machine is not new or known to be free of malware and other threats as in 'Clean PC Mode' then Train with Safe Mode' is recommended setting for most users - combining the highest levels of security with an easy-to-manage number of Defense+ alerts.

Training Mode: The firewall will monitor and learn the activity of any and all executables and create automatic 'Allow' rules until the security level is adjusted. You will not receive any Defense+ alerts in 'Training Mode'. If you choose the 'Training Mode' setting, we advise that you are 100% sure that all applications and executables installed on your computer are safe to run.

Tip: This mode can be used as the “Gaming Mode”. It is handy to use this setting temporarily when you are running an (unknown but trusted) application or Games for the first time. This will suppress all Defense+ alerts while the firewall learns the components of the application that need to run on your machine and automatically create 'Allow' rules for them. Afterwards, you can switch back to 'Train with Safe Mode' mode).

 

Is this close enough?

 

does it work only for the custom rules?

is there a possibility to distinguish the inbound & outbound connections


thanks!

 

I got your PM, and replied .

3xist.

 

Hmm, so far I love this firewall to death. I am currently using custom policy mode and using high alert frequency.

I'm actually not that bothered by the frequent warning dialogs in the high alert mode especially since I set the common applications I use to trusted.

By the way, is it true that some dialers/malware can dial out by pickybacking on trusted applications or maybe impersonating them?

The best thing seems to be that this firewall has optimized my internet speed? I know that makes no sense but it is the only conclusion I can come to so far.

I have been getting horrible speeds since around the beginning of the year and there hasn't been much I could do. I dont have cable or DSL but instead a service called Sprint Broadband which is an older microwave broadband technology. I already talked to the techs and they have tried everything. Anyway, Comodo has caused my average speeds to go from around 70-100 KiloBytes to around 300-400 KiloBytes like they used to be. This is no exaggeration either and has maintained since the time I first installed it. I am using a router(D-Link EBR-2310) so maybe it has had an effect on that? However, I think the speeds were bad even connecting straight from the modem so its probably not the router.

 

CPF3 not able to recognize altered .exes?

My opinion on Comodo is, it´s a very good firewall. But unlike SSM, which i used, it was not able to warn me, when i replaced the older version of QIP with a newer one (QIP is an instant messenger client).

This is maybe some space for improvements in CFP.

 

Re: CPF3 not able to recognize altered .exes?

If you had D+ in "clean pc mode" then you would have seen files in your pending file list which would have told you of the file changes to QIP. I updated (patched) WOW and Comodo never gave me a warning about the change. No biggie cause the program was listed as trusted to begin with. Then when I looked at my pending files I had about 100 files waiting for my approval. They were all to do with new WOW files. BTW ........WOW is World Of Warcraft.

 

Re: CPF3 not able to recognize altered .exes?

Hi,

i even have "paranoid mode" on, so specially here i would expect CFP3 to give some warning. In the pending list there was no entry (maybe, since i don´t use Clean PC mode right now).

 

This discusses NAT, not the firewall. NAT will stop unsolicited, but not bad/spoofed/malformed.

What strategy is that? Well, if you don't know what a certain event is, take an extra step and learn. Next time, if it is something you need, you'll know what to do with it.

I know of few firewalls that have features Comodo team doesn't even think about.

Comodo has become everything but a firewall. I hear they have plans to synergize with their AV any time soon, will that be called a "suite" then and discussed in the "other anti-malware" boards? Vendor can give any name, but I see this may very soon change to "Comodo Total Protection" or whatever.

Comodo's new features are not appreciated simply because they are not related to packet filtering and as such not needed in a firewall application.

 

Re: CPF3 not able to recognize altered .exes?

When in paranoid mode you will not get pending files. Read the hlep file and you will get a definition of all the D+ settings and how they work. I have never used paranoid mode.

 

Re: CPF3 not able to recognize altered .exes?

yeah, i read the help file, but there is two problems. One is, after reinstalling newer versions of CFP i had thousands of pending files, so i flushed the whole list, since this would have been too much to work through, the other thing, someone recommended the usage of paranoid mode, when intended as a full alternative to the HIPS mode of SSM.

 

Hey ab..................Train with Safe Mode is a better choice then Paranoid in my opinion. If users are wondering whats going on with there pc and want to be cautious then clean pc mode is the choice. When you look at your pending files the first thing to do is purge them. Then do an online look up for any known programs. Then remove the left overs. If you still not sure what they are then you move them to your own safe files. Pending files can be useful if your trying to pin point malware. An experienced user or somebody with knowledge of there pc doesn't need pending files. In that case pending files can be a pain so the next best thing is train with safe mode like the firewall setting.

 

well, i´ll give train with save mode a try then. But i will check the behavior
when installing newer versions of known software. I maybe won´t look inside the pending files on a dayly base, though.

thx.

 

Interesting........when I was installing Kaspersky, it said "you must remove Comodo Firewall, it is incompatible with this product"??. Is this another case where what they really mean is that you must uninstall ONLY for the download & then it's OK to reinstall?.

Bob M.

 

KAV is incompatible with alot of products. Read there.

http://support.kaspersky.com/faq/?qid=208279367

 

I've been using Comodo firewall for 9 months and it works great. I have a Win XP SP 2 system sitting behind a router and for 3 years prior I had been using McAfee's AV and FW. I don't know which module was responsible but start up took 5 minutes at least. I had switched to NOD32 and when I added Comodo later it probably added <10 seconds or so to the start up (1 minute total?). I had tried Jetico previously (paid version) but it had a million alerts so I switched to Comodo.

In regards to version 3.0, I did see all of the problem topics and I was worried that something would happen to me but I didn't have as much as a hiccup during installation and I have not encountered any bugs in any versions.

Comodo's GUI is definitely not intuitive and a novice will have problems if they do not check out their forums or know someone knowledgeable (nowhere near as bad as Jetico). I was intimidated at first but their forum had a lot of info and with the community there I felt I could get an answer to any problem I would encounter.

I think 3.0 was a major step in being less complicated than any 2.X version but I wouldn't (and didn't) install it on my parent's computer. My parents are using Kaspersky's security suite and even though I had to gimp their firewall I bet they just OK every alert that pops up (they aren't any easier to understand than Comodo's). I might try Online Armor for them if it gets along better with Vista. My younger brother in college also uses 3.0 and he hasn't had a problem either.

Right now the FW and D+ are set to Train with Safe Mode so I only get alerts when I install new programs. The predefined rules help out a lot. 3.0 has also made it a lot easier for me to understand how the programs on my machine act and interact with each other. And it's free which is very nice (although I would be willing to pay).

My only complaint is Installation Mode as it is not intuitive how to switch modes and often times I forget to change it back. Supposedly ThreatFire can still protect your system in case you accidentally install a malware infected .exe so to me Installation Mode seems like a cop out (only if ThreatFire doesn't have a million alerts like Comodo does when not in Installation Mode). Currently I am not anticipating Threat Cast and I would disable it if it were to be included on a future version. However not all of it's features have been revealed yet so that could change.

 

i like it too
but have some bugs
if you go in the forum under bugs for the version 3 ,you would find some bugs

for example for me if i disable the firewall and want to re-enable i have to boot my pc again,this is boring

 

KAV has been working fine with CFP for me.

When installing KAV I didn't see any messages asking me about CPF - I would only expect that if I was installing KIS.

 

Make know mistake: this is one fine firewall. You can whine and gripe all you want. The fact that you can tweak all you want (if you take the time to learn); the program is absolutely free, right off the bat it works great. You are being nothing but nit-picky. The bottom line is this: This is top of the line!

 

100% in total agreement.

Man, you would have to been asleep at the wheel to miss this one, and i was.

I am thoroughly IMPRESSED!!!

I had no idea COMODO would ever come out with such a handcuffs type combo like i see this is now. It's going to replace my Kerio 2.15, and i thought i would never see that day.

The HIPS is absolutely pinpoint precise in my early experiences with it, and talk about configurable, man you can fasten the screws as tight as you want with it.

That's my opinion/impression of it. I must admit, COMODO is really done themselves very proud with this release. It is so professional and dead-on! accurate with it's protections let alone features which are MANY!!

Thanks COMODO. It's been a long time coming and now is here.

 

I really love CFP v3 and its meant that I no longer need to think about paying for a firewall or HIPS.

Yes its far from perfect and I'll never understand how everything works but for people who like to tweak things I feel its absolutely superb.