Comodo is capable of extraordinarily complex rules. This is way too much for typical user so Comodo developers optimize CIS for the least amount of alerts so as not to overwhelm users.
To make matters worse, the CIS user-interface is all manner of confusing quirky behaviors (bugs). Add to all of this a problematic combined Cloud service - and it just ain't good for the average user.
I will state this much: I will gladly put my customized CIS configuration up against any AV test lab.
That's the point - CIS needs experienced user who is willing to craft his\her own rules and policies. That's something even "advanced" users won't even dare to mess with. Do it incorrectly and you have smashed, unbootable system.
CIS is not for amateur night - and at the same time - the AV-Test is not designed to comprehensively test Comodo nor any other AV for that matter. There are those that know precisely what I am talking about - because they understand what AV-Test evaluates and does not evaluate.
So those are some of the facts - and just won't change until Comodo refines their product = fixing bugs, eliminating questionable features, making CIS management\administration more user-friendly, etc.
I am experienced CIS user - and, in my experience, CIS is just plain overkill for typical use. For it to be effective it requires too much manual administration and how it works is incomprehensible for average user. I use it because I genuinely like it; it is configured to behave (for the most part), is quiet on my relatively simplistic system, and it handles malicious files like no other AV that I can find. So for me, it personally works. That is not true for the vast majority of users - which is Nico@FMA's argument. And, unfortunately, that is Comdo reality...
Anyhow...
I tell it like it is - Comodo is very good in some respects, but at the same time, has a lot of issues that sow nothing but confusion with most users - and it is not intended to be a complete internet security suite. CIS is designed only to keep the physical system clean - and not stop malware from getting onto your system (which is the whole premise of AV-Test methodology).
Comodo is "Old School" and its management can be way too laborious for the uninitiated. My CIS config keeps my system clean despite heavy malware testing. The defining factor is I know how to use it to its fullest capabilities... so, despite what Comodo says, CIS is best suited to techies and security soft geeks. That's it.
Bottom line: If you can do it, then CIS can do it...
Good - yes, Great - no, needs refined, Garbage - absolutely not
Your comment is sound and valid yet one needs to realize that being able to add complex rules is not a geeky thing.
For example why would anyone go trough the trouble to add complex rules to CIS while for example, Kaspersky, Norton, Sophos and ESET are capable of exactly the same rules, just as strict and rocksolid with just one switch?
Most people do not realize that Comodo does not offer anything different then most other brands, the difference is that Comodo requires extensive knowledge in order to get a unfinished product working and then hope for the best, while packages from Norton and others offer the same protection (bottom-line) but require virtually zero config, just plug and play. Another thing is that most users have a router/modem from their ISP which comes standard with a hardware based firewall provided by brands like Cisco, Juniper and Palo Alto which beats ANY software firewall hands down.
So having a Norton IS, Kaspersky IS, ESET IS (Or any flavor for that matter) will provide pretty much the same level of security, the only difference is that lets say Norton is not bugged while with Comodo you have to see day by day if things are bugged broken or otherwise.
No disrespect to Comodo as their product (Framework wise) is sound, but virtually none of their products comes close to being properly finished and maturely developed compared to lets say other brands like the ones above.
And again being able to add your own rules is really not that special as each of the names above you can add your own rules and make things as strict as you would require.
The whole hype about Comodo and their firewall is long past glory as their firewall is literally the only thing sound in their whole CIS package, and this pure fact is reason enough to advise users to go with a different package that does not have all the problems and issues.
I see rarely a Norton, Kasperky or ESET user in Malware removal help, since their security usually does the trick, yet the amount of CIS users asking for help is staggering across virtually all known communities like: MT, Wilders, Bleep and Nucia.
That says something i think.
I personally would be the first to embrace Comodo if and only if they stop releasing 50% finished products and really would start ironing out the bugs in their flagship products. I mean do not get me wrong their concept is sound no argue there....
Its just the end result, its to little, to less and not matured enough and totally unstable as is being shown time after time after time.
Thats not making Comodo look bad but these are facts that cannot be said about other brands.
So i would change this: Good - yes, Great - no, needs refined, Garbage - absolutely not
To
Good Hell No Average Yes
Garbage partly...
But then again each one can have their own opinions and idea's and that's ok so if CIS works for you (or anyone else) then fantastic don't fix something which aint broken, yet i personally would NOT (With a big N) advise anyone to install CIS.