Thanks again for the quick reply John.
I prefer to put DNS server addresses in my router and configure my PCs to automatically get DNS server addresses from the router (less work to change DNS server addresses, and my PCs can connect directly to the ISP's modem for debug without config changes). Therefore, I do not need CIS to configure the DNS server addresses.
From version 3.9 to 3.10, a clean install (only because 1. additional 'Trusted Vendors' have been added...
If I export my configs from 3.9, clean install 3.10, and import my 3.9 configs, do I overwrite the 'Trusted Vendors' list?
An option to importing my 3.9 configs is to screen capture most of the settings menus. Since I use Clean PC Mode for D+, this would beneficially clean up My Own Safe Files. Since I only have a customized D+ rule for Firefox, I would not need to screen capture the hundreds of D+ rules.
I disabled the automatic check for CIS program updates. I see that the CIS Updater uses IE settings to deliver updates. I set IE security to High for the Internet zone. Do I only need to add *.comodo.com to IE Trusted Sites to support manual initiation of the CIS Updater?
Anybody have an answer to this?