Comodo Firewall and Virtualized Browsers

[cruelsister]

 

[Bot]

A YouTube video has been shared in this thread.

As an AI, I cannot view or analyze video content, so I am unable to determine its topic or any security implications.

If this relates to a malware, scam, or other cybersecurity issue, a text description of the concern along with any relevant logs or screenshots would allow for more useful community input.

Additional details from the original poster are needed before any further conclusions can be drawn.

 

[cruelsister]

Although this video topic is restricted to sandboxing browsers, the change seen in the Proactive Configuration has Security implications. Previously a sandboxed malicious file had the capability to connect out to the Network with a resulting FW alert; if C was in Silent Mode, however, the FW block would be automatic without any alert given.

But with this new build (8170) Network requests are automatically negated without regard to the mechanism used to establish such connections out. This is a very good thing as the majority of current malware are in the RAT or Stealer families- and a Stealer can't steal what they cannot send, and a RAT can't squeak if C cuts off its head.

 

[New_Style_xd]

Hello. In this image, I have the firewall configuration enabled, but it still isn't working.

 

[ErzCrz]

Hello. In this image, I have the firewall configuration enabled, but it still isn't working.

Containment is showing as "desativado" deactivated in your video. Can you try it with other browsers and check you don't have a firewall rule to block your browser from connecting out? Have you Reset Container?

 

[New_Style_xd]

Containment is showing as "desativado" deactivated in your video. Can you try it with other browsers and check you don't have a firewall rule to block your browser from connecting out? Have you Reset Container?

View attachment 299829

I'll check and let you know here if there's a rule blocking it.

 

[New_Style_xd]

Hi @ErzCrz
I ran the test again, just as I mentioned; there are no rules blocking the browser, but the result is the same—I don't know what to do.
Even though I watched the video from @cruelsister I can't replicate the setup on my end.
I notice she only installed the firewall, whereas mine is the full version; I just switch the profile—could that be the issue?

 

[ErzCrz]

Hi @ErzCrz
I ran the test again, just as I mentioned; there are no rules blocking the browser, but the result is the same—I don't know what to do.
Even though I watched the video from @cruelsister I can't replicate the setup on my end.
I notice she only installed the firewall, whereas mine is the full version; I just switch the profile—could that be the issue?

You can try just switching to Firewall Profile. Not sure why it isn't working for you. What tweaks have you made to each configuration?

 

[cruelsister]

It's odd that you are having the issues. If you have time, please consider doing the following:

1). First off, are you installing on your actual system or on a fresh VM? Second, is it Win10 or Win11?
2). If on a VM. just install the Firewall (uncheck the AV part).
3). Install the FW, reboot. After system restarts run update again (you will get a quick update and will have to reboot again).
4). After system restarts set up Comodo exactly as in the video and then run the same tests.
5) Let me know if issue persists...

 

[New_Style_xd]

You can try just switching to Firewall Profile. Not sure why it isn't working for you. What tweaks have you made to each configuration?

I just switch the profile and don't adjust anything; I leave it at the default setting.

 

[New_Style_xd]

It's odd that you are having the issues. If you have time, please consider doing the following:

1). First off, are you installing on your actual system or on a fresh VM? Second, is it Win10 or Win11?
2). If on a VM. just install the Firewall (uncheck the AV part).
3). Install the FW, reboot. After system restarts run update again (you will get a quick update and will have to reboot again).
4). After system restarts set up Comodo exactly as in the video and then run the same tests.
5) Let me know if issue persists...

I'm testing this on a Windows 10 virtual machine.
What I really want is for it to work by installing the full antivirus and simply modifying the profile—since many people have said that changing the profile alone does the trick.

I think what you suggested should work, given that only the firewall will be installed.

 

[lokamoka820]

@New_Style_xd If I remember correctly, you were trying to run Google Chrome inside Sandboxie within a Comodo container, right? In the video, cruelsister didn’t use Sandboxie, so I’m not sure if that would make any difference.

 

[New_Style_xd]

@New_Style_xd If I remember correctly, you were trying to run Google Chrome inside Sandboxie within a Comodo container, right? In the video, cruelsister didn’t use Sandboxie, so I’m not sure if that would make any difference.

Based on the video she made, she tested it with three browsers—Chrome, Edge, and Firefox—using Comodo Sandboxie.

 

[cruelsister]

Based on the video she made, she tested it with three browsers—Chrome, Edge, and Firefox—using Comodo Sandboxie.

I believe that you are using an incorrect term- Sandboxie is a totally different application and has nothing to do with Comodo. My video used Comodo's CONTAINMENT module which can also be referred to as a Sandbox.

As to the AV, adding this would have no impact at all on the Containment module- actually I jut tried installing the full suite and browsers were able to connect out if virtualized (identical to the video)/
My final question is when you installed Comodo in your VM, was it a FRESH install or did you already have the previous Comodo version installed and just installed the new build over the top?