Advanced Plus Security bribon77 Security Config 2019

[bribon77]

That's my configuration. For 2019.

 

[ChemicalB]

Nice setup bud, I remember W7 as lightweight and no-frills-OS, but please consider to migrate to a more secure operating system because of the near end of support.

 

[stefanos]

Thanks for sharing. But Comodo Firewall (Cs settings)and Sandboxie ?? Two sandbox why?

 

[bribon77]

Thanks for sharing. But Comodo Firewall (Cs settings)and Sandboxie ?? Two sandbox why?

Because in the configuration of Cs. it does not stop navigating with the Sanbox of Comodo. Because it is configured in the Firrewal Block requests,
so I use Sandboxie to browser or open emails.

 

[stefanos]

Because in the configuration of Cs. it does not stop navigating with the Sanbox of Comodo. Because it is configured in the Firrewal Block requests,
so I use Sandboxie to browser or open emails.

 

[JM Safe]

Good config bribon!

 

[Gandalf_The_Grey]

Because in the configuration of Cs. it does not stop navigating with the Sanbox of Comodo. Because it is configured in the Firrewal Block requests,
so I use Sandboxie to browser or open emails.

But you can do it, see from 3:54 in her configuration video:

 

[bribon77]

But you can do it, see from 3:54 in her configuration video:

Yes I know but I use the configuration of the first video he made. and with that does not let navigate.

 

[Gandalf_The_Grey]

This is the last Comodo Firewall configuration video she made together with:
It's worth watching them because there were some small changes to the original settings.

 

[bribon77]

If maybe I'll do it again that way, thank you.

 

[shmu26]

Nice config!
In Comodo firewall, it's good to maximize the embedded code protection, as protection against fileless malware.

 

[Gandalf_The_Grey]

Nice config!
In Comodo firewall, it's good to maximize the embedded code protection, as protection against fileless malware.

How do you do that?

 

[bribon77]

But you can do it, see from 3:54 in her configuration video:

Reconfigured the Comodo . And I removed Sandboxie.

 

[Andy Ful]

Sandboxie can be very useful in combo with Shadow Defender on boot. You cannot install the new programs with Shadow Defender on boot, because they will disappear after reboot. You have to exit the shadow mode or install programs in the sandboxes on the partition which is not in the shadow mode. In the second case you can safely install applications without touching the system - very nice feature, because the applications are isolated to each other, and can be additionally highly restricted. I still use such a setup (for 2 years) on one of my old laptops.

Edit.
That will require Sandboxie paid version, because in the free version only one sandbox can be active at a time.

 

[bribon77]

Sandboxie can be very useful in combo with Shadow Defender on boot. You cannot install the new programs with Shadow Defender on boot, because they will disappear after reboot. You have to exit the shadow mode or install programs in the sandboxes on the partition which is not in the shadow mode. In the second case you can safely install applications without touching the system - very nice feature, because the applications are isolated to each other, and can be additionally highly restricted. I still use such a setup (for 2 years) on one of my old laptops.

Thank you @Andy Ful. I didn't know that. I'll try it.

 

[shmu26]

How do you do that?

It's in the advanced settings, miscellaneous, you slide the buttons to "on" for as many vulnerable processes as you can without causing issues. Depending on your system and installed programs, you might not be able to turn on full protection for cmd.exe, for instance.

 

[bribon77]

That's right, thank you @shmu26.

 

[bribon77]

I've already found that here.

 

[shmu26]

That's right, thank you @shmu26.

View attachment 205393

The one you showed in your second post is correct, and you already know about it
The one that you highlighted here is different: it disables Comodo self-protection for the specified processes.

 

[bribon77]

I have added a standard account to my configuration.