Reply to thread

Message

<blockquote data-quote="ebocious" data-source="post: 1036030" data-attributes="member: 75834">If you left the HIPS enabled, I wouldn&#039;t like it either. I&#039;m not aware of any issues updating apps with auto containment enabled. In fact, I just now checked Firefox, installed update 112.0.1, closed the browser, emptied the container, and checked again. Firefox is up to date. Lastly, if you have apps that need firewall exceptions, and adding them manually isn&#039;t within your scope, you can disable the firewall permanently, and use Windows Firewall instead. This may reduce your security, but I imagine it would still be tougher than any default-allow apparatus you&#039;re installing on &quot;average&quot; users&#039; systems now.Edit: if you need to update an application that isn&#039;t whitelisted, then you can either temporarily disable auto containment, or designate an ignored folder (separate from the downloads folder), pin it to Quick access, drag installer files from Downloads to the ignored folder, and launch them from there (it&#039;s less convoluted than it sounds once you do it). That said, there aren&#039;t a lot of applications I&#039;m aware of that aren&#039;t already whitelisted by Comodo, as they&#039;ve been around since 1998, and added a lot of whitelist rules since then to fix false positives. IMO, it&#039;s easier to find a workaround for a few false positives, than to repair damage from one false negative. An ounce of prevention is worth a pound of cure.</blockquote>

[QUOTE="ebocious, post: 1036030, member: 75834"] If you left the HIPS enabled, I wouldn't like it either. I'm not aware of any issues updating apps with auto containment enabled. In fact, I just now checked Firefox, installed update 112.0.1, closed the browser, emptied the container, and checked again. Firefox is up to date. Lastly, if you have apps that need firewall exceptions, and adding them manually isn't within your scope, you can disable the firewall permanently, and use Windows Firewall instead. This may reduce your security, but I imagine it would still be tougher than any default-allow apparatus you're installing on "average" users' systems now. Edit: if you need to update an application that isn't whitelisted, then you can either temporarily disable auto containment, or designate an ignored folder (separate from the downloads folder), pin it to Quick access, drag installer files from Downloads to the ignored folder, and launch them from there (it's less convoluted than it sounds once you do it). That said, there aren't a lot of applications I'm aware of that aren't already whitelisted by Comodo, as they've been around since 1998, and added a lot of whitelist rules since then to fix false positives. IMO, it's easier to find a workaround for a few false positives, than to repair damage from one false negative. An ounce of prevention is worth a pound of cure. [/QUOTE]

Verification