Opinions of Comodo Firewall Pro 3.

I like the fact that CFP is being actively developed and you dont have to wait ages for bugs to be fixed. Somehow you get the feeling that the product is here to stay. Another thing i like is their forum, you will allways find an answer to your questions.

 

Thanks guys for the feed back. Glad Comodo is doing well for you and it will remain free and always be free.

 

how do u know it will remain free for ever?


by the way now i use comodo and i'm happy , but i have to say one thing
I tried these program , i installed and did immediately the tests without modify the firewall rules
with outpost i did pass all the test
with online armor i did pass all the test
with look and stop i did pass all the test
well i installed comodo 2 and i did pass all the test at pc flank and shield up

well i installed comodo 3 and i did not pass the test , i did pass no one test
only after 4 days of tweak the firewall i was able to pass all the tests

i guess that comodo 3 without a good setting is a few not safe, i mean the install of comodo is too much permissive

for sure i did the tests with a modem ethernet (without a firewall built in ) so i used only software firewall

 

See Panic response over at Comodo's forums and you will realize that the PC Flank test is a joke.

 

i want to say that comodo need to setup well to pass all the tests
that's all
i'm using comodo because is one of the best firewall
can i tell my experience ?

 

Personally, it is a very hard sell for a local researcher like myself as well as stubborn loyal to change ways when i enjoyed another reliable albeit obsolete firewall for so long as i have.

But with this latest COMODO D+ i do believe that i've now discovered i can safely turn the page from that long dependency.

The HIPS alone IMO is surprisingly functional as well as very configurable, and given the SEVERAL levels of protection functions they've taken foresight to include, it helps broaden the interest in the overall program itself.

I'll admit right here and now that compared to others i'm very green concerning this new DUO security app, but the careful thought thats went into it's creation surface immediately fresh out-of-the-box.

It's another learning curve to take up for me, but with this formidable a well-rounded composition that it's showing so far, it's certainly well worth the effort.

To be honest, i wouldn't have batted an eye at it with any attention had i not given in to the overwhelming curiosity as relates to the additional feature of Defense + (HIPS) also built in.

My compliments to the chef!

EASTER

 

@EASTER

I thought you said you were going to stick with SP1. Did you decide to move up to SP2 now that SP3 is coming out?

Al

 

Hi Al

Yes i did finally transition to SP2, once i discovered it didn't cause any problems along with DirectX and DotNet as well as my ART & SECURITY Apps not to mention my special network setup.

As to SP3? That's way too far off for me to chance yet. LoL

So then Adric, whats your opinion of COMODO's D+ (HIPS)?

Is it to your expectations or exceed them?

I think it was a long time coming for them and with this combined program along with it's new feature set, they've made up a lot of ground in the reliability and satisfaction department for many, including myself.

I like it a lot myself and so far seems really good.

 

Comodo is indeed a good firewall, but there is one thing that keeps me from installing it. There is no posibility to completely disable the HIPS part AND remove all unnecesary hooks from the system. Of course, I can disable D+, but most of the hooks remains in place.

 

And why on Earth do you want to disable the HIPS. that is an important feature now a days.

 

yes right but i did not consume ram ,4 mb for the service
you can disable totaly ,but i guess not uninstall only the d+

 

Hmmm. I found the way .

 

If you would check your hooks using one of the available tools, you would see that they are still in place, even if you disable D+. This behaviour is not something I like on my computer (I know I'm strange, but that's me ).

Because that's how I think my security strategy. Not everybody feels the need for a HIPS. Just because it's feature everybody wants, that doesn't mean I want it .

 

Hi EASTER,

Nothing is ever up to my expectations.

Ever since I tried ZA, I said to myself - this can't be it. So I tried Kerio and stuck with that for a while until Sunbelt got into the picture. I started using CFP 2.4 while it was still in BETA. I stuck with that until I decided on one of the last 3.0 BETAs for additional protection. For now, I really have not found a compelling reason to look at other firewalls or HIPS programs.

My PROs

- No negative impact on system performance
- Low resource usage
- Good protection
- Runs quietly once you've gone through the motions
- Allows custom rule making
- Free

My Cons

- GUI needs work and is not that user friendly. (Doesn't save window settings,
uses too many child windows, inconsistent use of scroll bars, no auto sizing of
columns, no rule sorting, etc.)
- Modified files retain their previous rules after allowing changes.
- Pending Files only available with Clean PC mode. No option to turn it off or on for all modes.
- Inconsistent logging and no option to log all events
- Inconsistent use of links on summary page. (No link to active process list
and no links to logs for Network or D+ even though these items are mentioned
there)
- Traffic Meter is useless since it mostly shows old information
- Cannot block Highlights

I've gotten rid of all of the HIPS and real time stuff that I've tried and all I use now is an AV along with CFP 3.0. If Comodo ever gets around to fixing some of the not so critical bugs, I'll be a happy camper.

Al (how's that for not answering your question) Adric

On Demand:

SAS
RKU
PowerShadow
Virus Total

 

Thanks for that detailed feedback Adric.

Ever since dropping ZA a loooooong long time ago for Kerio and coupled with the vast improvements as well as some excellent new introductions for XP of most security apps, changing firewalls again is been of no concern or need. Still isn't for some like myself.

However, Comodo's latest D+ combo seems to show some real potential and looking at how quickly they overcame what looked like a deficit at one point, they seem to have made up ground to fit it right in with the Top players in this field.

I just want to take the temperature of others opinions on it and if they see real improvements that are encouraging enough to endorse it openly or not.

Again Thanks

EASTER

 

hey Easter I am currently using Eqsecure like your self. having both Comodo
D+ (HIPS) and EQsecure wouldn't they conflict with each other ??
or do they run smoothly along side each other?

 

Hi arran

I don't find any conflicts running them both here on XP Pro SP2 even with the STRONG! Alcyon's RuleSets. In fact it nearly conjures up memories when i was running both SSM + CyberHawk once for awhile.

The only obvious and constant is that whichever one alerts first is followed by the other's alert, and since EQS is insanely LITE and uses minimal system resources and Comodo's D+ is also no real hog in that department either, they both run flawlessly and really fluid with my enemic as crap 512MB of Memory.

And that's on top of my usual collection of VISTA enhancements on XP Pro that are constant running processes.

 

just trying out comodo 3 now, in comodo 2 there was a setting in firewall
that blocks all internet traffic on system boot up, can't seem to find that in comodo 3, some one confirm its no longer there?

 

it asks on each new program, new operation and so on ...

it will not ask again on same program (unchanged) or same operation (done by already known unmodified programs) ...

the system can't be done way better except utilizing predefined whitelist for default OS operations and most used common software (i think D+ already got this anyway) and maybe trusting some digital signature (but there are some weakness in this))...

i doubt you can make it even more simpler w/o negating the point of the security solution (well they try with the community info but that one again got some weak points)

 

This done by default. Comodo is loaded way into the kernel before you get to your desktop.

 

Testing Comodo....(signature is in my backuped image)

When I installed it with Defence +, Sandboxie 3.24 wouldn't initialize.

But when I installed only the firewall + leak proof protection, Sandboxie works OK.

What is the difference then between those two installs.

 

Basically theres no difference because the comodo drivers are installed no matter what you choose to install. With firewall + leak proof protection only a few options are deselected in D+. SandboxIE should work with any installation mode you choose.

 

I use Comodo with D+ active and Sandboxie works fine. There are 5 files that D+ needs to recognized for Sandboxie to work. Simply put D+ in training mode then launch a browser sandboxed.

 

I'm using sandboxie and have had no trouble few pop-ups from D+ that was about it running smooth here

 

OK, I uninstalled CFW in safe mode with Revouninstall, then I installed it again in normal mode and YES! Sandboxie works.
I think I flunked by installing CFW in safe mode because I wanted to make sure that no other apps conflicted with the install.

Thanks for the reply.

And the idea of putting firewall and defence + in the training mode is a pretty good idea . It simplifies most.