Advice Request Comodo Internet Security Setup/configuration thread

[CMLew]

Hi @Umbra ,

"Auto-Sandbox:
Enable Auto-Sandbox: Yes
Enable File Source Tracking: Yes
Rules:
Added "Ignore My security Softs" rule.
Added "Portable Browsers" rule (Run Virtually > Limited)
Edited "Run virtually" rule to "untrusted". "

Wanted to know
1) Why do you change the portable browsers rule from run virtually to limited.
2) Wouldn't the last sentence contradict? Since you changed from run virtually to untrusted but instead you changed to limited (for the portable browser)?
3) How do you add those rules for portable browsers from USB?

 

[hjlbx]

Hi @Umbra ,

"Auto-Sandbox:
Enable Auto-Sandbox: Yes
Enable File Source Tracking: Yes
Rules:
Added "Ignore My security Softs" rule.
Added "Portable Browsers" rule (Run Virtually > Limited)
Edited "Run virtually" rule to "untrusted". "

Wanted to know
1) Why do you change the portable browsers rule from run virtually to limited.
2) Wouldn't the last sentence contradict? Since you changed from run virtually to untrusted but instead you changed to limited (for the portable browser)?
3) How do you add those rules for portable browsers from USB?

Comodo virtualizes file system, registry, operating system files, etc in virtual container (sandbox\virtual desktop). Comodo sandbox does not work like Shadow Defender - that virtualizes almost entire disk. I think Comodo virtualizes OS applications as they are called in the run sequence - but that is just a hunch. Precise technical infos on the subject are scant.

Run Virtually = application is allowed access to all virtualized operating system resources.

Run Restricted = denies access to application to virtualized operating system files; extent of denied access dependent upon restriction level = Partially Limited, Limited, Restricted, and Untrusted. The restrictions are well explained in User's Manual (help.comodo.com).

If you apply too high a restriction, application might not work; for example, IE 11 will not function at restriction greater than Limited (= as Restricted, Untrusted).

 

[Deleted member 178]

Hi @Umbra ,

"Auto-Sandbox:
Enable Auto-Sandbox: Yes
Enable File Source Tracking: Yes
Rules:
Added "Ignore My security Softs" rule.
Added "Portable Browsers" rule (Run Virtually > Limited)
Edited "Run virtually" rule to "untrusted". "

Wanted to know
1) Why do you change the portable browsers rule from run virtually to limited.
2) Wouldn't the last sentence contradict? Since you changed from run virtually to untrusted but instead you changed to limited (for the portable browser)?
3) How do you add those rules for portable browsers from USB?

1- portable browser cant run properly on level above Limited
2- No because above point.
3- never tried but i will.

 

[CMLew]

Comodo virtualizes file system, registry, operating system files, etc in virtual container (sandbox\virtual desktop). Comodo sandbox does not work like Shadow Defender - that virtualizes almost entire disk. I think Comodo virtualizes OS applications as they are called in the run sequence - but that is just a hunch. Precise technical infos on the subject are scant.

Run Virtually = application is allowed access to all virtualized operating system resources.

Run Restricted = denies access to application to virtualized operating system files; extent of denied access dependent upon restriction level = Partially Limited, Limited, Restricted, and Untrusted. The restrictions are well explained in User's Manual (help.comodo.com).

If you apply too high a restriction, application might not work; for example, IE 11 will not function at restriction greater than Limited (= as Restricted, Untrusted).

Wow that's a whole load of geek level for me as a life science student.
Will try to digest them slowly. Thanks @hjlbx

 

[Deleted member 178]

Yes "diggest it slowly" is the right attitude with CIS, we were on CIS for years so we went through lot of love, stress, hate, abandon, re-love, despair, re-hate, etc...

 

[CMLew]

Yes "diggest it slowly" is the right attitude with CIS, we were on CIS for years so we went through lot of love, stress, hate, abandon, re-love, despair, re-hate, etc...

Haha, thanks for encouragement @Umbra
Another curious question:
You mentioned portable browser couldn't run properly above limited, does this also applies to normal browser (those install into system)? Why is it then? I mean if they all run in virtual (as in sandboxed I supposed) wouldn't that be safer than in run limited? Sorry, might sound noobish but for sake of learning I dun mind being called noob

 

[hjlbx]

Haha, thanks for encouragement @Umbra
Another curious question:
You mentioned portable browser couldn't run properly above limited, does this also applies to normal browser (those install into system)? Why is it then? I mean if they all run in virtual (as in sandboxed I supposed) wouldn't that be safer than in run limited? Sorry, might sound noobish but for sake of learning I dun mind being called noob

Run Virtual protects physical system.

Run Restricted is an additional layer that protects file access to Operating System resources.

So with Comodo you can run an application is sandbox (Run Virtually) + limit access to operating system resources\process creation (Run Restricted).

Makings double protections...

 

[Tony Cole]

Running web browsers higher than limited stops copy and paste, but Firefox did everything else on restricted - untrusted it failed to load.

 

[hjlbx]

Running web browsers higher than limited stops copy and paste, but Firefox did everything else on restricted - untrusted it failed to load.

No copy & paste for me IE 11 Run Virtually - Limited...

 

[illumination]

Yes "diggest it slowly" is the right attitude with CIS, we were on CIS for years so we went through lot of love, stress, hate, abandon, re-love, despair, re-hate, etc...

And will again... Just finished reinstalling it, and already was cussing at the mismatching file verdicts still available I have the beast tamed now though, took a minute.

 

[Deleted member 178]

Haha, thanks for encouragement @Umbra
Another curious question:
You mentioned portable browser couldn't run properly above limited, does this also applies to normal browser (those install into system)?

Don't mix installed softs and portable ones,nor virtualized and not virtualized; installed softs are mostly trusted so they would run normally in certain level (depending the softs).

Why is it then? I mean if they all run in virtual (as in sandboxed I supposed) wouldn't that be safer than in run limited? Sorry, might sound noobish but for sake of learning I dun mind being called noob

you can run Limited unvirtualized and run Limited virtualized not the same stuff.

And will again... Just finished reinstalling it, and already was cussing at the mismatching file verdicts still available I have the beast tamed now though, took a minute.

Training Mode bro , Training Mode !

 

[CMLew]

Don't mix installed softs and portable ones,nor virtualized and not virtualized; installed softs are mostly trusted so they would run normally in certain level (depending the softs).


you can run Limited unvirtualized and run Limited virtualized not the same stuff.

Ok, got a bit hang of it. Taking a rest now in Earth after flying from Mars.. mind-screwed after reading these... Haha..

 

[Deleted member 178]

welcome in the marvelous world of comodo's tweakers, once you are in you never look back

 

[hjlbx]

mind-screwed after reading these...

Welcome to Comodo.

 

[CMLew]

Welcome to Comodo.

I wondered if there any security program (other than CIS) than can mind-screw our brain juice just like this one?
So far I confirm Bitdefender pity your brain hence they settle it themselves without disturbing you...

 

[hjlbx]

I wondered if there any security program (other than CIS) than can mind-screw our brain juice just like this one?
So far I confirm Bitdefender pity your brain hence they settle it themselves without disturbing you...

Malware Defender... 32-bit only system HIPS... make you want to jump from bridge.

 

[CMLew]

Malware Defender... 32-bit only system HIPS... make you want to jump from bridge.

Malware Defender? A virus? HIPS?

Remove Malware Defender 2015 virus (Removal Guide)

 

[hjlbx]

Malware Defender? A virus? HIPS?

Remove Malware Defender 2015 virus (Removal Guide)

That is fake Malware Defender.

Legitimate Malware Defender has not been updated since 2012. It is HIPS. You can configure it such that you can respond to pop-ups for the rest of your life... (same as Paranoid Mode without rules)...

 

[Deleted member 178]

You forgot old Online Armor , as strong as CIS, as mindscrewer as CIS ^^

 

[hjlbx]

You forgot old Online Armor , as strong as CIS, as mindscrewer as CIS ^^

Online Armor ... believe it or not, I never used ... must have been geek tool... user's really complained when it was discontinued.

Malware Defender, Online Armor, Comodo = all advanced HIPS = all same = Mind Freak...