- Apr 13, 2013
- 3,143
As there have been a number of threads concerning the Pro's and Con's of Comodo products lately. just wanted to share my preferred setup in detail, and the reasons for it.
Comodo security products (for the Home) come in two flavors- Comodo Internet Security (CIS) and Comodo Firewall (CF). The difference is that CIS has a local antivirus module (note that they both have a Cloud scanner). As has been discussed elsewhere, the AV component of Comodo is at best middle of the pack (detractors would say that although the AV protection is unmatched by any it is bettered by all); this being said I do not see any need to either suggest installing or further discussing CIS.
So concentrating on Comodo Firewall it can be seen that CF has 3 basic components:
1). A Cloud Scanner- as noted above, it is of dubious value and can be shut off; but as it really doesn't interfere with anything, why bother?
2). A HIPS component- I suppose it is adequate, but unnecessary with a proper Sandbox setting.
3). The Auto-sandbox- Superb with settings of either Untrusted (which I don't care for) or Full V (which I covet).
Installation and setup- really easy. After install and reboot (good idea to click Custom install to avoid Dragon, PrivDog, etc):
1). Right Click the Comodo icon in the tray and select Advanced View.
2). Right Click the icon again and:
a). Uncheck the "Show Widget" (I hate widgets and so should you).
b). Make sure Firewall is in "Safe Mode"
c). Sets Hips to Disable
d). Set Auto-Sandbox to "Fully Virtualized".
3). Open up the main GUI, click Tasks, then click Sandbox Tasks. Right click on Reset Sandbox and select "Add to Taskbar". The reset function is now on the main GUI ribbon.
4). Open up the main GUI, Click Tasks, then click Advanced Tasks, then click Open Advanced settings:
a). Uncheck "Play Sound"
b). Uncheck "Show Notification messages" (this is optional- anything running in Full V will have a Green Border around it, so why bother getting a popup telling you this is done?).
That's pretty much all. CF should be silent from then on and will only alert when a non-whitelisted program tries to run and/or tries to connect to the net. If an application that you know is Safe gets sandboxed, just open up the main GUI, click on Sandboxed Apps, right click the program you know is safe and select Add to Trusted.
Now try to get infected.
Comodo security products (for the Home) come in two flavors- Comodo Internet Security (CIS) and Comodo Firewall (CF). The difference is that CIS has a local antivirus module (note that they both have a Cloud scanner). As has been discussed elsewhere, the AV component of Comodo is at best middle of the pack (detractors would say that although the AV protection is unmatched by any it is bettered by all); this being said I do not see any need to either suggest installing or further discussing CIS.
So concentrating on Comodo Firewall it can be seen that CF has 3 basic components:
1). A Cloud Scanner- as noted above, it is of dubious value and can be shut off; but as it really doesn't interfere with anything, why bother?
2). A HIPS component- I suppose it is adequate, but unnecessary with a proper Sandbox setting.
3). The Auto-sandbox- Superb with settings of either Untrusted (which I don't care for) or Full V (which I covet).
Installation and setup- really easy. After install and reboot (good idea to click Custom install to avoid Dragon, PrivDog, etc):
1). Right Click the Comodo icon in the tray and select Advanced View.
2). Right Click the icon again and:
a). Uncheck the "Show Widget" (I hate widgets and so should you).
b). Make sure Firewall is in "Safe Mode"
c). Sets Hips to Disable
d). Set Auto-Sandbox to "Fully Virtualized".
3). Open up the main GUI, click Tasks, then click Sandbox Tasks. Right click on Reset Sandbox and select "Add to Taskbar". The reset function is now on the main GUI ribbon.
4). Open up the main GUI, Click Tasks, then click Advanced Tasks, then click Open Advanced settings:
a). Uncheck "Play Sound"
b). Uncheck "Show Notification messages" (this is optional- anything running in Full V will have a Green Border around it, so why bother getting a popup telling you this is done?).
That's pretty much all. CF should be silent from then on and will only alert when a non-whitelisted program tries to run and/or tries to connect to the net. If an application that you know is Safe gets sandboxed, just open up the main GUI, click on Sandboxed Apps, right click the program you know is safe and select Add to Trusted.
Now try to get infected.
