Question Could you tell me about your experience with Comodo Firewall on Windows 11?

[rhythm]

Could you tell me about your experience with Comodo Firewall on Windows 11?

1. It has been functioning efficiently.
2. There are problems with it. Kindly list the problems.

 

[cruelsister]

1). There are no native incompatibilities between Win11 and CF.
2). Issues may arise when settings are arbitrarily set by the user. CF is unlike other security applications in that it will function Best when tweaked Least.

 

[kylprq]

no problem "for me" acts identical as on win10

 

[rhythm]

It's already installed and working smoothly.

 

[ErzCrz]

I've run CIS and CF on Windows 11 without any issue. I did have to create rules for Edge TCP 53, 5353, 1900 and Neighbourhood solicitation (for ipv6) and some rules for general windows apps for outbound to port 443 but it runs smoothly.

EDIT: I can leave all those rules out but I get 1000s of blocks in the logs but everything still works.

 

[rhythm]

Although my ISP supports IPv6, I'm not using it. Should I enable IPv6 and activate “Filter IPv6 traffic” in CF?

AutoContainment-Unrecognized-Action set to Block blocks programs that require elevated privileges as well, correct?

 

[kylprq]

AutoContainment-Unrecognized-Action set to Block blocks programs that require elevated privileges as well, correct?

exactly

 

[rhythm]

Does Password Protection hide all alerts?

 

[ColonelMal]

No problems whatsoever with Windows 11 and @cruelsister's recommended settings.

 

[ErzCrz]

Does Password Protection hide all alerts?

No, just protects settings. You either need to turn on Silent Mode ore set the Do not show alerts... block application in Firewall and Containment etc.

 

[rhythm]

No, just protects settings. You either need to turn on Silent Mode ore set the Do not show alerts... block application in Firewall and Containment etc.

Three of my Windows 11 systems have CF. I haven’t set up password protection, and my system is using the default auto-containment rules. The other systems have password protection enabled along with auto-containment rules set to block. CF hides alerts when you "set auto-containment for unrecognized to block and enable password protection". You don’t have to change alerts with this setting. CF prevents the installation of unknown files and installers, leading to the "Windows cannot access..." message. An unknown or malicious program won't be able to start a connection if it's not running. Am I correct?

 

[ErzCrz]

Three of my Windows 11 systems have CF. I haven’t set up password protection, and my system is using the default auto-containment rules. The other systems have password protection enabled along with auto-containment rules set to block. CF hides alerts when you "set auto-containment for unrecognized to block and enable password protection". You don’t have to change alerts with this setting. CF prevents the installation of unknown files and installers, leading to the "Windows cannot access..." message. An unknown or malicious program won't be able to start a connection if it's not running. Am I correct?

Yes. Set auto containment to Block and the you can do the same with the firewall. I'm in between installs at the moment so it's from memory as I'm testing out a different configuration but their help information is still useful Containment Settings, Containment Computer Security, Desktop Software | Internet Security

 

[cruelsister]

Three of my Windows 11 systems have CF. I haven’t set up password protection, and my system is using the default auto-containment rules. The other systems have password protection enabled along with auto-containment rules set to block. CF hides alerts when you "set auto-containment for unrecognized to block and enable password protection". You don’t have to change alerts with this setting. CF prevents the installation of unknown files and installers, leading to the "Windows cannot access..." message. An unknown or malicious program won't be able to start a connection if it's not running. Am I correct?

You are 100% correct. Setting Containment to Block will prevent unknowns from even getting to Containment (no system changes, no OutBound requests). The suppression of alerts is actually understandable as the user without the password can do nothing about it anyway.

Although this setup may be appropriate for a Household with Nasty Untrustworthy children, one will give up much too much freedom for the regular user. A thing that needs to be understood is that in addition to unsigned and unknown stuff, also blocked would be legitimate software that has bee both signed and countersigned BUT NOT vetted (nor fully trusted) by Comodo.

 

[rhythm]

You are 100% correct. Setting Containment to Block will prevent unknowns from even getting to Containment (no system changes, no OutBound requests). The suppression of alerts is actually understandable as the user without the password can do nothing about it anyway.

Although this setup may be appropriate for a Household with Nasty Untrustworthy children, one will give up much too much freedom for the regular user. A thing that needs to be understood is that in addition to unsigned and unknown stuff, also blocked would be legitimate software that has bee both signed and countersigned BUT NOT vetted (nor fully trusted) by Comodo.

I understand "containment set to block" permits only Comodo-approved apps to connect and function. The setting is just right for the users involved. I will handle the system, Windows updates, program installs and updates, and stuff.

The regular users who always opt for "block" or never select "don't isolate again" do not benefit from alerts. I'm pretty sure that several Comodo or CruelC users just hit "block" when faced with alerts.

 

[rhythm]

Although my ISP supports IPv6, I'm not using it. Should I enable IPv6 and activate “Filter IPv6 traffic” in CF?

I have disabled IPv6 now. The internet slows down from time to time and displays a window that says “wait or kill” the website. There are some apps that take longer to connect.

Comodo Reputation Scan allows you to add unrecognized files to the trusted list.
Files List has the option to add unrecognized files to the trusted list.
Don’t Isolate It Again place unrecognized files on the trusted list and ignore them in auto-containment. Adding files to the trusted list is enough, while ignoring them is risky. Maybe there’s something I’m overlooking?

 

[rhythm]

I removed CF from all Windows 11 systems except my own. All systems occasionally got stuck shutting down or restarting. I had to perform a hard shutdown on the systems whenever the issue occurred.

 

[Pico]

CIS V12 ain't officially compatible with Windows 11. How many times should this be repeated?
People who have issue running CIS V12 on Windows 11 do not come to this forum to complain about it.
And nobody can claim nor proof that there are no incompatibilities between CIS V12 and Windows 11.

 

[rhythm]

I removed CF from all Windows 11 systems except my own. All systems occasionally got stuck shutting down or restarting. I had to perform a hard shutdown on the systems whenever the issue occurred.

The problem I had with CF seems to have vanished from my system. I think it was because of another piece of software, which got fixed after an update. I have the same set of programs on other systems, and they are all running smoothly with CF now.