Comodo Firewall Wishlist V6

[Guest]

[Azucareros]

Going through Download.com, i find CFP, the reviews seem good, except that every other user review complains of the massive amount of popups, its pretty clear that most people who download this firewall don't know how to use it properly (installation mode, etc.)

I'm thinking that CFP could come with tooltips, some balloons that will popup in the first few days to teach the user of installation mode, remember my answer, etc.

Other than that, installation seems to be a pain still, I wouldn't know, I haven't uninstalled it.

[.FaZio93.]

I'm thinking that CFP could come with tooltips, some balloons that will popup in the first few days to teach the user of installation mode, remember my answer, etc.

Almost every windows has a "What do these settings do" link that brings them to the Help guide. I think most people just don't feel like reading it and learning how to use it.

[Vettetech]

Almost every windows has a "What do these settings do" link that brings them to the Help guide. I think most people just don't feel like reading it and learning how to use it.

So very very true. People are too lazy now a days. Remotes come with everything. Hell my new AC came with a remote. What the heck do I need that for. Car stereo's have remotes. What wrong, your fingers and arms dont reach. Geezzz. My 70 year old mother even  knows how to use Comodo.

[valmont_al]

When firewall is disable, it is necessary somehow to change an icon in system tray.
As after the brief disable many of people forget to set it active again.
It would be comfortably also, if in case of setting off points were offered: "On automatically in 5 minutes,...30 minutes... after reboot..etc"
Sorry for my english

[.FaZio93.]

Car stereo's have remotes. What wrong, your fingers and arms dont reach. Geezzz.

What the? are you serious?

[3xist]

Let's keep on topic please guys.

Josh

[jackfrost]

i really do like CFP after using it a week.
i used it to replace Zone Alarm, which has made some changes that i don't jive with.
CFP so far offers much of what i like in a firewall product, especially after running thru the top 10 firewalls currently listed. but after years of using others, my learning curve with CFP is somewhat behind articulate due to its own design.

some of the things i miss are the simple ability to access a a firewall log that does its own refreshing in REAL TIME, and seeing an offending IP and RIGHT CLICKING on it and having some basic functions, such as a WHO-IS LOOK UP and BLOCK and ALLOW. these are elementary functions that should be easily accessed without digging deeper into the firewall interface. it is counter-intuitive to have a log that does not offer these commands from it, and the fact that it doesn't do real-time refreshing is an annoyance.

i do have high praise for the product, as it is the only one i feel protected with and has potential to be the top product out there. out of many many many for-pay products that i have tested, none come close to this one. but there is more that can be done to it's already functional interface to make it more intuitive. never under-estimate the power of the almighty right-click accessed command, it can put some much needed functions on the surface so they won't have to be searched for by novice users.

Peer Guardian black-list integration (importing from Block List Manager perhaps.... a simple IPFilter.dat would would be welcome by many i am sure, as would Onion or Garlic Routing detection & interoperability.

[Stanr]

When firewall is disable, it is necessary somehow to change an icon in system tray.
As after the brief disable many of people forget to set it active again.
It would be comfortably also, if in case of setting off points were offered: "On automatically in 5 minutes,...30 minutes... after reboot..etc"
Sorry for my english

I am more concerned with disabling D+, which I have to do from time to time, and the lack of some sort of warning that it is disabled.

Windows XP will notify me if the firewall is disabled but nothing will let you know if D+ is disabled.

CFP constantly notifies you if in install mode but is silent if it's disabled. Seems to me that off is just, if not more, important then install mode.

Why is it so difficult to change a Tray Icon to advise that one or both are disabled?
s.

[juls]

I would like the next CFP to be compatible with Win Server 2008.
And the four button thing as suggested by weaker at the beginning of the discussion would be nice, too.

[gibran]

Hallo,

IIRC Comodo Defense+ is the only HIPS that supports digital signatures through Trusted Vendors.

Although this support looks only limited to trust applications with valid Trusted vendors signatures I guess it would be useful to improve Digital signatures support

• Adding an option to alert an user when an executable is digitally signed and its certificate has not been added to trusted vendors list.
• Adding an option to alert users when an application certificate is not valid if its vendor is listed in Trusted vendors. Even if there are few hacked components out there, application with tampered/invalid digital signatures pose enough of a concern and should be reported.
  • Every D+ alert description should mention that the parent app cerificate is invalid
  • A new optional alert should be implemented to add those apps to My quarantined files or to disable Digital signature validation for that executable
  MS sigverif supports on-demand signature verification but I guess it's not enough.
• Adding an option to export/backup trusted vendors cerificate list.

[gpnx]

I would like CFP to have hash/some other enforcement that the exe being executed is the same one for which a policy was created. Also, continuing on this, If and exe for which i have policy gets modified during "install mode" i would like the polices that it had to be market for review or something.

[gpnx]

(another post in defence of my suggestion for hash values for exe to policy mapping, but in different light)

I just noticed that if i put the same exe (notepad.exe for example) in different location, the firewall threat is a different exe and the rules i previously defined for the notepad.exe are not applied. I there a way to have single entry for all instances of the notepad.exe (just example)? Its the same .exe anyway, should reuse the policy. (i guess here come another use for the hash in addition to the integrity...)

Also i read a lot of bug post about issue with maping exe to policy. I kind of think its because you use file paths to map it.. (people complaing about mapped drives, vmware, misindentifying exe -> policy, etc...)

[Fake vegeta]

I want you guys to put these features in the firewall:

* More parental control, I mean features like web filtering and stuff... Block certain sites, block certain domains, have like a child mode and adult mode or something....
* I want the firewall have ip adress look up, which include a map with a trace route so you can visually see the route...
* I want the firewall have build-in dictionary's for people who do not understand certain terms...
* I want the firewall have visual clues when something is wrong with the firewall (like a red gui when something is oudated or wrong set...)
* I want the firewall have a game mode... when playing games the firewall will be set to game mode and the firewall will apply rules that is best for playing games.. without losing protection...
* I want the firewall have build-in search when you want to set something up, looking for a definition etcetera..
* I want the firewall have build-in chat with comodo security experts or threat cast community...
* I want the firewall have build browser protection for unwanted cookies, ad-aware, banners, drive-by downloads, phising, spoofing etcetera....
* I want the firewall have build-in protection for important taks on the internet like online transactions and stuff... The firewall should have some kind of trust mode... there it will be extra strict or something... so control of the used certificate, control over data input etcetera...


I know some people think some things are not necessary for a firewall and it can make it too heavy and it is not like a firewall anymore... But I think these features can also be implemented in the security suite and can be optional...

[.FaZio93.]

* I want the firewall have a game mode... when playing games the firewall will be set to game mode and the firewall will apply rules that is best for playing games.. without losing protection...

i'd say d+ training mode is fine for that

[Fake vegeta]

i'd say d+ training mode is fine for that

yes that is true, but you this has to be done for every game, and if you have a lot of different games... a game mode option is better I think...

[Tags:]