CIS v4/v5/v6 Install Switches

[Guest]

[Kurt_Aust]

Now that Comodo has released a .msi version of the installer, customised silent installs have become feasible.  

Version 5.12 32-bit  (i586)  Traditional style
http://download.comodo.com/cis/download/installs/1000/xml_binaries/cis/cis_setup_x86.msi

Version 5.12 64-bit (x86_64) Traditional style
http://download.comodo.com/cis/download/installs/1000/xml_binaries/cis/cis_setup_x64.msi

Version 6.x 32-bit  (i586)  "Modern" style
http://download.comodo.com/cis/download/installs/2000/xml_binaries/cis/cis_setup_x86.msi

Version 6.x 64-bit (x86_64) "Modern" style
http://download.comodo.com/cis/download/installs/2000/xml_binaries/cis/cis_setup_x64.msi

Following is a list of known properties and their possible values (? indicates the value is unconfirmed).  There is no need to include a property if using the default value.

INSTALLANTIVIRUS=
0 don't install anti-virus
1 ? install anti-virus (default)

INSTALLFIREWALL=
0 ? don't install firewall
1 ? install firewall (default)

FWFEATURES=  (see reply 6 for more info)
1 firewall only, no defence+
2 ? firewall & optimal defence+ (default)
3 ?? firewall & maximum defence+ (wild guess)

HIDE_SECURITY_ALERTS=
0 ask if connection allowed
1 always grant connection, that is make firewall useless (default)

THREATCASTFEATURE=
1 ? join threatcast (default)
2 don't join threatcast

SETOURDNSSERVER=
0 ? don't use Comodo DNS servers (default)
1 ? use Comodo DNS servers

INSTALLDEFHOMEPAGE= (obsolete)
0 don't change IE homepage
1 ? change IE homepage (default)

INSTALLASKDEFSEARCH= (obsolete)
0 don't install IE toolbar
1 ? install IE toolbar (default)



For example the following command will install the firewall only (x64 version with no AV, D+, TC, DNS or bonus features):

msiexec /I PathToInstaller\cis_setup_x64.msi INSTALLANTIVIRUS=0 FWFEATURES=1 HIDE_SECURITY_ALERTS=0 THREATCASTFEATURE=2 INSTALLDEFHOMEPAGE=0 INSTALLASKDEFSEARCH=0 /Passive /NoRestart

while the following command should install everything (x86 version with AV, FW, max D+, TC, DNS and all bonus features):

msiexec /I PathToInstaller\cis_setup_x86.msi  FWFEATURES=3 HIDE_SECURITY_ALERTS=0 SETOURDNSSERVER=1 /Passive /NoRestart

For security reasons it is strongly recommended to remove the "Allow IP Out From MAC Any To MAC Any Where Protocol Is Any" rule from Firewall > Network Security Policy > Application Rules > Windows System Applications.

To block a specific application run the "Define a New Blocked Application" wizard on the Firewall tab, it also wouldn't hurt to remove the vendor's name from Defense+ > Computer Security Policy > Trusted Software Vendors.

[Kurt_Aust]

Links for the previous versions

32 bit  (i586) v4.1
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x86.msi

64 bit (x86_64) v4.1
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x64.msi

[jfcarbel]

Do these switches still work for latest version?

[SivaSuresh]

Do we have a way to supply a configuration file ".cfgx" during installation?

[Kurt_Aust]

Yes, the switches still work as of version 5.3.181415.1237

I've heard there was a way to import configuration files via the command line for older versions, but I never tried it and it may no longer work.

[naren]

What should I do to install only CFW? No defence plus nothing. What & How to do this?

WIN XP SP3 32 BITS

Thanxx
Naren

I did  this to install FW only, no D+ through cmd

Desktop\naren\cis_setup_x86.msi INSTALLANTIVIRUS=0 FWFEATURES=1 THREATCASTFEATURE=2 INSTALLDEFHOMEPAGE=0 INSTALLASKDEFSEARCH=0 /Passive /NoRestart

But D+ also gets installed.

[SivaSuresh]

hello all

fwfeatures=1--- only firewall active (safe mode) both D+ and Sandbox are disabled.
fwfeatures=2---Firewall and D+ are active, sandbox disabled.
fwfeatures=3---All three components are active.

[Kurt_Aust]

I did  this to install FW only, no D+ through cmd

Desktop\naren\cis_setup_x86.msi INSTALLANTIVIRUS=0 FWFEATURES=1 THREATCASTFEATURE=2 INSTALLDEFHOMEPAGE=0 INSTALLASKDEFSEARCH=0 /Passive /NoRestart

But D+ also gets installed.

That seems very strange as your command syntax is correct, I only test the x64 version but there should be no difference.

Are you absolutely certain that Defence+ is active?  With FWFEATURES=1 set, on the Defence+ settings page the box "Deactivate the Defense+ permanently (Requires a system restart)" should be ticked.

[naren]

That seems very strange as your command syntax is correct, I only test the x64 version but there should be no difference.

Are you absolutely certain that Defence+ is active?  With FWFEATURES=1 set, on the Defence+ settings page the box "Deactivate the Defense+ permanently (Requires a system restart)" should be ticked.

Heyy I am getting FW in Safe Mode & D+ as Disabled. My point was I want to install only FW. I simply dont want to install D+ i.e D+ shouldn't be there. As per your 1st post its can be done with the command you mentioned. Here's the command you mentioned

For example the following command will install the firewall only (x64 version with no AV, D+, TC, DNS or bonus features):

msiexec /I PathToInstaller\cis_setup_x64.msi INSTALLANTIVIRUS=0 FWFEATURES=1 THREATCASTFEATURE=2 INSTALLDEFHOMEPAGE=0 INSTALLASKDEFSEARCH=0 /Passive /NoRestart

Thanxx
Naren

[Kurt_Aust]

Heyy I am getting FW in Safe Mode & D+ as Disabled. My point was I want to install only FW. I simply dont want to install D+ i.e D+ shouldn't be there. As per your 1st post its can be done with the command you mentioned.

I'm afraid that the limit of what you can get, the files are there but they're not activated.  To some degree it's a GUI limitation as under the Defence+ tab are such things as "Computer security policy / Trusted software vendors" which also affects which digital signatures the firewall trusts.

[SivaSuresh]

Any progress? Can we supply configuration file during installation?

[michaelv]

Any progress? Can we supply configuration file during installation?

SURELY this is as useful as being able to perform an unattended installation in the first place!

Anyone!? 

[Tags:]