App Review Comodo Firewall Containment vs Ransomware

[cruelsister]

Content source

https://youtu.be/psnLH--rvFQ

More of a settings review, nut note that CF works fine on Win 11. Also, although not specified directly in the video, note the blocking of the spawned vbs script in sample 1 as the on by default) Comodo Script Analysis kicked in.

 

[The_King]

Thanks for this, was going to request an updated video with settings for CF.

 

[franz]

More of a settings review, nut note that CF works fine on Win 11. Also, although not specified directly in the video, note the blocking of the spawned vbs script in sample 1 as the on by default) Comodo Script Analysis kicked in.

I don't know CF in depth, but I still wonder about one thing, after Comodo firewall is installed, do we need to do anything ourselves such as reset the container or is everything automatic and any attacks and files automatically removed by Comodo itself and deleted?

 

[ErzCrz]

@cruelsister awesome video as always Out of curiosity, is it worth enabling IPv6 filtering or is that something handled by windows firewall or router?

@franz I think it resets when you restart the machine.

 

[wat0114]

Thank you for the demo. CFW will be on my radar this year.

 

[codswollip]

480p? C'mon... where's 4K sweetheart

 

[blueblackwow65]

I thought The Comodo firewall was discontinued. If not where can we download thelatest firewall version only for windows 11?Thks

 

[Bumblebee Uncle]

I thought The Comodo firewall was discontinued. If not where can we download thelatest firewall version only for windows 11?Thks

Surprisingly no! was so happy to learn yesterday through this thread that good old wonderful Comodo is going to get two updates this year along with (hopefully) a UI refresh (not that a UI refresh matters) but still.... Amazing news

 

[blueblackwow65]

You have a link to latest firewall only download please

 

[Bumblebee Uncle]

Here you go @blueblackwow65 : Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year

 

[ErzCrz]

Here you go @blueblackwow65 : Comodo Firewall | Get Best Personal Firewall Software for $29.99 A Year

Actually, that makes you download the CIS Pro version despite it saying Free Firewall

Link from Forum Topic: https://download.comodo.com/cis/download/installs/8050/standalone/cfw_installer.exe

 

[Bumblebee Uncle]

Actually, that makes you download the CIS Pro version despite it saying Free Firewall

Link from Forum Topic: https://download.comodo.com/cis/download/installs/8050/standalone/cfw_installer.exe

Oh sorry! I did not check the link - thank you.

 

[ForgottenSeer 69673]

Would these type files be executed by a drive by or an email attachment? If all exes and scripts are blocked, how would any of these runs?

 

[cruelsister]

I don't know CF in depth, but I still wonder about one thing, after Comodo firewall is installed, do we need to do anything ourselves such as reset the container or is everything automatic and any attacks and files automatically removed by Comodo itself and deleted?

Personally I always do a manual reset of Containment from the GUI daily. Although not at all necessary, I consider it a simple Best Practice.

 

[cruelsister]

You have a link to latest firewall only download please

An easy way is here: Download Comodo Firewall - MajorGeeks

Would these type files be executed by a drive by or an email attachment? If all exes and scripts are blocked, how would any of these runs?

Timely question! There have been a great many different RATs that are being pushed through Email that are NOT in the form of exe's. Just happens that I have a video already prepared on this very point (of course done in stunning 480p and text boxes which is part of my charm).

 

[codswollip]

done in stunning 480p and text boxes which is part of my charm

I prefer my malware pr0n in UHD.

 

[simmerskool]

obviously (I assume) @cruelsister is running cf in vm_guest win11, any special considerations for installing cf in VMware Player / Workstation v16 on win10 guest?

 

[outlawxtorn]

@cruelsister I noticed you didn't check the option "do not show pop up alerts" and set it to deny requests as in previous videos.

 

[cruelsister]

I noticed you didn't check the option "do not show pop up alerts" and set it to deny requests as in previous videos.

That was on the HIPS screen which I showed just to point out that the HIPS was not enabled. If the HIPS module was being used it would have been checked. Apologies for any confusion.

 

[outlawxtorn]

That was on the HIPS screen which I showed just to point out that the HIPS was not enabled. If the HIPS module was being used it would have been checked. Apologies for any confusion.

So sorry! I didn't specify I meant in the firewall settings, my bad.