CFW/cs - No Alerts but Actions?

[SearchLight]

I use CF the CS way but I have found after set-up that the only way I know what it blocked is by opening up Advanced View of the GUI and reviewing whether CFW Blocked anything in the four categories: Contained Apps,
Unrecognized Files, Network Intrusions, and Blocked Applications, and then proceed accordingly. Sometimes I have found a program listed but received no notification that CFW took an action.

The only other indicator is when a program is virtualized by a Green colored frame encircling the GUI of the program in question.

Only other sort of notification is if I receive a Windows Error Message when I am working with a program.

I appreciate what CS has accomplished with bullet-proofing the security of my PC but I wish there was an alternate way to use her settings but at the same time, receive Pop-Up alerts when it takes an action. As you can see from the screenshot of Containment there is only one setting of "Do Not Show Privilege Elevation Alerts" where you have several options but if you uncheck it, you are only presented with "Run Isolated" which I assume means it will present me with a pop-up to make a choice.

I have a feeling activating HIPS will do what I am inquiring about but it is very noisy as I have read elsewhere, whereas Containment used as CS suggested is less noisy and just as effective. No happy medium, I guess? Suggestions?

 

[bribon77]

I
use this option in the orange color to reset the sanbox, in the gray color it is to see if it has put something in quarantine, and in the higher numbers it will realize what is in the sanbox or will have to give permission for it to make. be reliable / not / or give it to delete.

 

[SearchLight]

View attachment 217173I
use this option in the orange color to reset the sanbox, in the gray color it is to see if it has put something in quarantine, and in the higher numbers it will realize what is in the sanbox or will have to give permission for it to make. be reliable / not / or give it to delete.

Forgive my ignorance here but what version of CFW does your screenshot refer? I am using CFW v12, the latest? Thanks

 

[bribon77]

Forgive my ignorance here but what version of CFW does your screenshot refer? I am using CFW v12, the latest? Thanks

I am using the latest version of CF. the only thing is that I like this theme.

 

[Venustus]

If I may ask without railroading this thread...What are you guys using with CFW??

 

[show-Zi]

Forgive my ignorance here but what version of CFW does your screenshot refer? I am using CFW v12, the latest? Thanks

Only the skin is different. There should be a similar symbol on your gadget.

 

[bribon77]

From here you can change the theme.

 

[SearchLight]

If I may ask without railroading this thread...What are you guys using with CFW??

For myself, I integrated the CAV module from CIS for consistency but am using cs settings, as I dislike WD's menu wading. For the sake of Cruelsister suggestions, and what everyone else mostly agrees, CFW with her settings alone is all that you need.

 

[Venustus]

Thanks..!

 

[SearchLight]

From here you can change the theme.
View attachment 217176

You are using V12 you said, so for my Modern Theme, this is what I got:

 

[SearchLight]

Thanks..!

You are welcome.

 

[bribon77]

If you look at the top left Comodo has put 11 applications in the Sandbox.

 

[SearchLight]

I must not be eating enough Brain food as I just discovered that I asked the same question a year ago in this thread:

Advice Request - CFW/cs Containment/Blocking Alerts - What is the best setting?

I have the latest CFW v11set with cs settings. I have noticed that sometimes, when I open the GUI, files have been blocked but I did not receive any alerts that this happened. I want to make sure that I am alerted each time the program intends to block a program. That said, what settings...

malwaretips.com

This might help me. Hope it helps all of you.

Sorry for the sudden senility.

 

[SearchLight]

If you look at the top left Comodo has put 11 applications in the Sandbox.View attachment 217178

I do not seem to have this theme in my config although I activated Modern.

 

[bribon77]

You have to configure the Widget. Drag them with the mouse until you see them like that.

 

[outlawxtorn]

Do any of you install internet security essentials during the install process?

 

[shmu26]

I use CF the CS way but I have found after set-up that the only way I know what it blocked is by opening up Advanced View of the GUI and reviewing whether CFW Blocked anything in the four categories: Contained Apps,
Unrecognized Files, Network Intrusions, and Blocked Applications, and then proceed accordingly. Sometimes I have found a program listed but received no notification that CFW took an action.

The only other indicator is when a program is virtualized by a Green colored frame encircling the GUI of the program in question.

Only other sort of notification is if I receive a Windows Error Message when I am working with a program.

I appreciate what CS has accomplished with bullet-proofing the security of my PC but I wish there was an alternate way to use her settings but at the same time, receive Pop-Up alerts when it takes an action. As you can see from the screenshot of Containment there is only one setting of "Do Not Show Privilege Elevation Alerts" where you have several options but if you uncheck it, you are only presented with "Run Isolated" which I assume means it will present me with a pop-up to make a choice.

I have a feeling activating HIPS will do what I am inquiring about but it is very noisy as I have read elsewhere, whereas Containment used as CS suggested is less noisy and just as effective. No happy medium, I guess? Suggestions?

If I got you right, you are looking to be notified in a consistent way every time Comodo takes action on one of your files.
And you are getting a satisfactory notification from Containment, i.e., the green frame around the window.
So why not change the various default block rules in Autocontainment to do the same as the rule for unrecognized files? Then you should get consistent behavior.

 

[SearchLight]

If I got you right, you are looking to be notified in a consistent way every time Comodo takes action on one of your files.
And you are getting a satisfactory notification from Containment, i.e., the green frame around the window.
So why not change the various default block rules in Autocontainment to do the same as the rule for unrecognized files? Then you should get consistent behavior.

In an earlier posting which I referenced above CS suggested using FW Custom rules to be alerted to FW Block actions.
Is your suggestion related to Comodo Fix?

 

[shmu26]

In an earlier posting which I referenced above CS suggested using FW Custom rules to be alerted to FW Block actions.
Is your suggestion related to Comodo Fix?

No, sorry, apparently I just don't understand the issue.

 

[SearchLight]

No, sorry, apparently I just don't understand the issue.

You understood me correctly. Under CS settings, CFW does not really alert you when it blocks or contains a file with a pop-up alert. The file is just just blocked from doing anything. With Custom Setting, the Fw will display a pop-up whenever it blocks something from connecting. Containment just presents Green Frame, and Unrecognized just when I see a number in the GUI.