Is There Anyway... [RESOLVED]

[Guest]

[simmikie]

to run Comodo Pro ver 3 without Defense Plus, as a firewall only?

[doktornotor]

Of course, see the fine manual 

[simmikie]

Of course, see the fine manual 

thanks for the reply. i am a huge believer in reading the documentation, so that was the first thing i did. the documentation lies. last night (after reading in the documentation about the option in the install routine to load fw only) i made three attempts at loading FW only (without leak protection as well) and all three times watched the installer as it installed Defense + Driver.

i want to use Comodos FW, as i believe it is excellent. as it should be. Comodo as a FW developer has the most experience in this area and for ver 3 is head and shoulders above ver 2.4, conceptually and functionally. in my opinion Defense Plus is good, but needs alot of refinement. i was hoping to have the best of both worlds, Comodos excellent FW, with a somewhat more graceful HIPS app to work with it.

i am simply grasping at staws in the hopes that someone may have found a way to accomodate my efforts. again the help files state it can be done, and the install routine provides an option to do so, but Defense Plus is loaded anyway.


Mike

[Vettetech]

The HIPS in Comodo 3.0 is very powerful. I always install it on any pc. There is no reason not to use it. In todays day and age you need a behavior blocker like D+? What exactly is your problem with D+?

[Oriour]

I think that option of installing FW only just leaves D+ off or something. Since Comodo is pretty light with it anyways, you could (provided you haven't already) just deactivate D+ and ignoring it or you know... switch it on disabled and leave it there.

[doktornotor]

the documentation lies. last night (after reading in the documentation about the option in the install routine to load fw only) i made three attempts at loading FW only (without leak protection as well) and all three times watched the installer as it installed Defense + Driver.

again the help files state it can be done, and the install routine provides an option to do so, but Defense Plus is loaded anyway.

I really don't understand your problem here... Choosing "Firewall" with "Leak Protection" unchecked only enables the stateful packet filter. If you are into saving a couple MBs of disk space, they you probably have a problem with this, dunno... 

p. 15 -
Firewall (with 'Leak Protection' option checked) - This option installs the packet filtering firewall as above and some, but not all, Defense+ functionality to provide effective leak protection against malware.


Are you choosing a wrong option? You should choose Firewall ('Leak Protection' option NOT checked)

[simmikie]

I really don't understand your problem here... Choosing "Firewall" with "Leak Protection" unchecked only enables the stateful packet filter. If you are into saving a couple MBs of disk space, they you probably have a problem with this, dunno... 

p. 15 -
Firewall (with 'Leak Protection' option checked) - This option installs the packet filtering firewall as above and some, but not all, Defense+ functionality to provide effective leak protection against malware.


Are you choosing a wrong option? You should choose Firewall ('Leak Protection' option NOT checked)

okay i am going to atempt to clear this up for you. i think D+ for me is almost there. i am not criticizing D+, heck Comodo has only been in the full blown HIPS development business for a short time, and D+ is an remarkable accomplishment. however, on my system i have several snapshots, one of which i use exclusively to test security apps. i ran across a HIPS app that i like alot, and wanted to retain Comodos Firewall and use this HIPS in place of D+.

Comodo Pro ver 3 has 3 options in it's installation routine:

1)Install the full version of Comodo Pro...which loads all drivers/services required to install and run Comodo Pro ver 3.

2) Install Firewll with Leak Protection...but it installs all services and drivers required to run Comodo Pro ver 3.

3) Install Firewall ONLY....but that option installs all drivers and services required to run the full strength Comodo Pro ver 3. Defense + is in fact installed in Clean PC mode, all of the default rules and settings are there and FUNCTIONING....in spite of the install setting/s i choose.

i hope this is clear enough for you. i sus pect i am getting replies from people that have not attempted to run Comodo Pro without Defense Plus. which is okay, i can understand why most are happy with this app as is. i was too for many months, but i found what I consider to be a more refined, but still powerful HIPS, that i wanted to run alongside, what i consider Comodo Pros strong suit, it's firewall.

so i will rephrase my question. has anyone successfully installed Comodo Pro ver 3 as a firewall only, and if so how was it accomplished? thanks to all that have offered-up their opinions and viewpoints. and thanks in advance to anyone who can help me accomplish what i am looking to do.


Mike

[doktornotor]

3)Pro ver 3. Defense + is in fact installed in Clean PC mode, all of the default rules and settings are there and FUNCTIONING....in spite of the install setting/s i choose.

so i will rephrase my question. has anyone successfully installed Comodo Pro ver 3 as a firewall only, and if so how was it accomplished? thanks to all that have offered-up their opinions and viewpoints. and thanks in advance to anyone who can help me accomplish what i am looking to do.

Well yeah I have, on multiple boxes. I really don't know what's wrong with your install, but nowhere on my boxes is D+ and the leak protection enabled and functioning when I install this w/ firewall only and leak protection disabled.

[simmikie]

Well yeah I have, on multiple boxes. I really don't know what's wrong with your install, but nowhere on my boxes is D+ and the leak protection enabled and functioning when I install this w/ firewall only and leak protection disabled.

well that is interesting. i made three attempts at it last night. twice with FW only and once to see if it made a difference with Leak Protection enabled. all three times i watched as the Defense+ driver was loaded, ad D+ was in fact present and ready to serve after install. could i request from you a screenshot of your GUI from one of your boxes with FW only?

and only as a matter of curiosity, are you still running a HIPS app on any/all of those boxes?

thanks,


Mike

[doktornotor]

well that is interesting. i made three attempts at it last night. twice with FW only and once to see if it made a difference with Leak Protection enabled. all three times i watched as the Defense+ driver was loaded, ad D+ was in fact present and ready to serve after install. could i request from you a screenshot of your GUI from one of your boxes with FW only?

Well sure, can attach them if still needed after this weekend, the boxes are not remotely accessible. Anyway, unless you are on Vista, you might use CPF 2.4 to get rid of the D+ stuff. 

and only as a matter of curiosity, are you still running a HIPS app on any/all of those boxes?

I have a couple boxes w/ full-featured Comodo (generally my own), and also have bunch of them using Comodo only as a packet-filter replacement for the bad Windows firewall, the people who are using those find the HIPS stuff too complex for them to use.

[eXPerience]

If you don't want defense+ but you installed it, then just disable it  .

Xan

[simmikie]

Well sure, can attach them if still needed after this weekend, the boxes are not remotely accessible. Anyway, unless you are on Vista, you might use CPF 2.4 to get rid of the D+ stuff. 

I have a couple boxes w/ full-featured Comodo (generally my own), and also have bunch of them using Comodo only as a packet-filter replacement for the bad Windows firewall, the people who are using those find the HIPS stuff too complex for them to use.

sure, that would be great, i would like to see the GUI without D+. 2.4 is not an option. what i want is what Comodo claims i am able to do, which is run ver 3 as a packet filter only. HIPS can be a bear for many to get a grasp on. i,ve used SSM, Prosecurity, Coreforce, as well D+. i have found D+ to be far more user friendly than any of those, so it's not a usability issue with me. rather i am excercising my penchant for ordering things in a manner that best suite me. 


Mike

[3xist]

You can go to Defense+ and disable it & then reboot anyway. Regarding the installation, have no idea because I have always installed CFP 3 fully.

But be warned... When you disable D+ 50% of you're protection is cut off. You won't be fully leaked & malware protected. IMO You need Defense+ to fight & prevent malware in such a great and effective way. Set D+ in Training Mode, go through your known and good apps one by one, then switch it back to Safe Mode.

The power off Comodo's Firewall & Defense+(HIPS) is So good!!!

Cheers,
Josh

[simmikie]

You can go to Defense+ and disable it & then reboot anyway. Regarding the installation, have no idea because I have always installed CFP 3 fully.

But be warned... When you disable D+ 50% of you're protection is cut off. You won't be fully leaked & malware protected. IMO You need Defense+ to fight & prevent malware in such a great and effective way. Set D+ in Training Mode, go through your known and good apps one by one, then switch it back to Safe Mode.

The power off Comodo's Firewall & Defense+(HIPS) is So good!!!

Cheers,
Josh

hey Josh,

thanks for the tip, and advise. i thought i had stated in an earlier post/s that i was not intending to run the PC without a D+ type app. i just wanted to run Comodo Pro's FW alongside another HIPS. since i originally posted, i uninstalled Comodo Pro in it's entirety, and ran Look N Stop, along side of EQSecure 3.41, with Aycons ruleset (hope i spelled that guys name right). great combo. testing that combo against leaktest and an admittedly small sampling of live malware, the results were outstanding. but after 2 days of testing and running the two together, i reinstalled the full version of Comodo Pro ver 3.

the reasoning was/is simple. Alycon did a tremendous job writing a very comprhensive ruleset for EQS 3.41, and it protects magnificently, but EQS is without direct support outside of China. no helpfile, and no official place to get questions answered, and it would be supremely unreasonable to burden Alycon with requests for aid, even though he clearly understands the innerworkings of that app. Comodo does have support through this forum, and there is a very comprehensive and well written help file. LNS is another very good security app, but for me Comodos FW, works in a fashion that is easier to manage. the logs while simple, provides (again, for me) all of the information i need to manage my network connections, and it's a vault. so as good as EQS 3.41 (with Alycons ruleset) and Look N Stop are, for me the pluses in Comodos column were greater.


Mike

[3xist]

Glad to hear it Mike.

Anything else you need help with?

Cheers,
Josh

[Tags:]