himalayas1

Level 1
all is said above, i will just add one Con

- you need to spend hours of Trial & Error to handle the best of it; i played with it since years, and i still don't handle everything yet; i can make it very very secured but it took years.
I noticed its possible to backup your configuration so you or anyone else can import it (you can restore it). General Settings, Configuration, select Proactive Security (or whatever the configuration you are using), click the up arrow (bottom of screen), click export.
 

himalayas1

Level 1
Doeas anyone know how to set it up correctly?:confused:
Prior to Comodo Free Firewall installation on Windows 10, go to Control Panel, Windows Firewall, Turn Windows Firewall on or off, for both Private and Public network settings, click Turn of Windows Firewall, click OK button at bottom of page to save. Since 'Comodo Free Firewall' does not have Antivirus, leave Windows Defender active and installed (Comodo Free Firewall did not uninstall or deacvtivate it). After install reboot (as prompted), after logging onto windows, uninstall 'GeekBuddy' (Control Panel, Programs & Features), reboot.

on Comodo Firewall (free version, 8.4), select General Tasks, Scan, wait for scan to complete (may take a while), where it displays SHOW (All Files), click the drop-down and select 'Unrecognized Files', on the right of each file displayed you will notice 'NO Action', select drop-down and choose 'Trust' if the file is by a trusted vendor like Microsoft or Intel, etc. To find out if the file is Trustworthy, right-click the file name and select 'Jump to Folder', right-click the highlighted file and select Properties, click Digital Signatures tab, select the first entry and click Details button, click View Certificate button, click Details tab, scroll down to Subject and you will be notified if it's Microsoft, Intel etc (if Microsoft & Intel for example - this is valid certificate), if valid certificate then select 'Trust' from drop-down and click on 'Apply Selected Actions' button to save, click Close button to exit. You can repeat procedure until SHOW ('Unrecognized Files') shows no files.

Comodo Free Firewall Configuration:
Defense +, HIPS, HIPS Settings, Enable HIPS (leave default setting: Safe Mode), don't change to 'Paranoid Mode'.
Defense +, Sandbox, Auto Sandbox, deselect 'Enable Auto-Sandbox'.
Defense +, Viruscope, deselect 'Monitor sandboxed applications only''.
Firewall, Firewall settings, deselect 'Do not show popup alerts'.
Firewall, Firewall settings, select 'Set alert frequency level', select 'low'.
Firewall, Firewall settings, click tickboxes 'filter loopback traffic' , 'block fragmented IP traffic', 'do protocol analysis' , 'enable anti-ARP spoofing'.
click OK (to save).
 
Last edited:
  • Like
Reactions: Sven and Ana_Filiz

Ana_Filiz

Level 4
Verified
PROS:
  • It will protect your system against the vast majority of infections.
  • Even with issues, in 98 % of cases, user can implement work-arounds.
  • Low system resource impact.
  • Based upon default-deny protection model: virtualization + anti-executable.
  • In one program, have a combo of features that mimics Sandboxie + AppGuard + NVT ERP + Windows Firewall Control + Secure Folders.
  • It has improved quite a bit over the past few years.

CONS:
  • It is not easy to figure out how it works without infos.
  • Intended behaviors are thought to be bugs because there is no source of infos (except here at MT).
:) I liked the last part of the message.
 

HarborFront

Level 46
Verified
Content Creator
Prior to Comodo Free Firewall installation on Windows 10, go to Control Panel, Windows Firewall, Turn Windows Firewall on or off, for both Private and Public network settings, click Turn of Windows Firewall, click OK button at bottom of page to save. Since 'Comodo Free Firewall' does not have Antivirus, leave Windows Defender active and installed (Comodo Free Firewall did not uninstall or deacvtivate it). After install reboot (as prompted), after logging onto windows, uninstall 'GeekBuddy' (Control Panel, Programs & Features), reboot.

on Comodo Firewall (free version, 8.4), select General Tasks, Scan, wait for scan to complete (may take a while), where it displays SHOW (All Files), click the drop-down and select 'Unrecognized Files', on the right of each file displayed you will notice 'NO Action', select drop-down and choose 'Trust' if the file is by a trusted vendor like Microsoft or Intel, etc. To find out if the file is Trustworthy, right-click the file name and select 'Jump to Folder', right-click the highlighted file and select Properties, click Digital Signatures tab, select the first entry and click Details button, click View Certificate button, click Details tab, scroll down to Subject and you will be notified if it's Microsoft, Intel etc (if Microsoft & Intel for example - this is valid certificate), if valid certificate then select 'Trust' from drop-down and click on 'Apply Selected Actions' button to save, click Close button to exit. You can repeat procedure until SHOW ('Unrecognized Files') shows no files.

Comodo Free Firewall Configuration:
Defense +, HIPS, HIPS Settings, Enable HIPS (leave default setting: Safe Mode), don't change to 'Paranoid Mode'.
Defense +, Sandbox, Auto Sandbox, deselect 'Enable Auto-Sandbox'.
Defense +, Viruscope, deselect 'Monitor sandboxed applications only''.
Firewall, Firewall settings, deselect 'Do not show popup alerts'.
Firewall, Firewall settings, select 'Set alert frequency level', select 'low'.
Firewall, Firewall settings, click tickboxes 'filter loopback traffic' , 'block fragmented IP traffic', 'do protocol analysis' , 'enable anti-ARP spoofing'.
click OK (to save).
Hi

What happens to those who have no digital certificates but are in C:/Windows directory? Do we trust them? What if I accidentally trusted the wrong file? How to revert to 'No Action' status?

Thanks
 
Last edited:

rosendalek

Level 3
HIPS is not enabled by default, thats bad. The firewall could be less noisy and make more decisions on its own, like the Norton Smart Firewall. And by default Cloud scanning and Heuristics are off in Full and Quick Scan. and Heuristics is disabled in realtime scanning