How can i migrate from CFP 3.0.x to CIS 3.5.x ?

[Guest]

[Ronny]

Q:
Is there a way to Export my old CFP 3.0.x configuration and Import that in a Clean install of CIS ?

A:
Yes, but it will take some manual configurations changes.
This is my result from CFP_Setup_3.0.25.378_XP_Vista_x32.exe --> CIS_Setup_3.5.54375.427_XP_Vista_x32.exe
On Windows XP, I only tested default installations so if you have changed defaults, check them later.

This guide is not complete for Vista !

Open CFP GUI and go to Miscellaneous,  Manage My Configurations, Select your Active Configuration (one with the checkmark) and export it to disk.

If you have Exported the configuration, now uninstall CFP from your system and reboot.

Now i install CIS with AV/FW/D+ now if it asks you to restart your computer DO NOT BOOT yet.
Untick Restart and press Finish.

Now open the CIS GUI go to Miscellaneous,  Manage My Configurations, Import As, Select your Export file, and give it a name for Example "COMODO - MyPersonalProfile", Now go to Select and select your "old" configuration.

Now go to Defense+, Common Tasks, My Protected Files, press the Groups button and make the window fullscreen, Change the following:

Important Files and Folders:
- Add %windir%\system\*

Windows Updater Applications:
- Change C:\Program Files\Comodo\Firewall\cfpconfg.exe --> C:\Program Files\Comodo\COMODO Internet Security\cfpconfg.exe

Windows System Applications:
- Add C:\Program Files\Comodo\COMODO Internet Security\cavscan.exe

Temporary Files:
- Check if it states ?:\RECYCLER\*

Comodo Files/Folders:
-Change C:\Program Files\Comodo\Firewall\* --> C:\Program Files\Comodo\COMODO Internet Security\*
-Add C:\WINDOWS\system32\drivers\cmdguard.sys
-Add C:\WINDOWS\system32\drivers\cmdhlp.sys
-Add C:\WINDOWS\system32\drivers\inspect.sys
-Add C:\WINDOWS\system32\guard32.dll

Change the Group name from COMODO Firewall Pro --> COMODO Internet Security
-Change all paths from C:\Program Files\Comodo\Firewall --> C:\Program Files\Comodo\COMODO Internet Security

Now Click APPY and APPLY to save the changes.

Now go to My Protected Registry keys, press Groups.

Automatic Startup:
Delete:
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\*
*\Software\Policies\Microsoft\Windows\System\Scripts\Startup
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Startup
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Startup

Add:
*\Software\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs
*\Software\Microsoft\Windows NT\CurrentVersion\AEDebug\Debugger
*\Software\Microsoft\Windows NT\CurrentVersion\Windows\IconServiceLib
*\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\*
*\Software\Microsoft\Windows NT\CurrentVersion\WOW\NonWindowsApp\*
*\Software\Microsoft\Windows NT\CurrentVersion\WOW\standard\*
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\*
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\*
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\*
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\CancelAutoplay\Files\*
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\*\Shell\*\command\*
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\*Startup
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\*Startup
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\*Start Menu
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\*Start Menu
*\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.???\*
*\Software\Microsoft\Windows NT\CurrentVersion\Drivers\*
*\Software\Microsoft\Windows NT\CurrentVersion\Drivers32\*
*\SOFTWARE\Microsoft\VBA\Monitors\*\CLSID

Internet Explorer Keys:
Delete:
*\SOFTWARE\Microsoft\Internet Explorer\Toolbar\*
*\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL
*\Software\Microsoft\Internet Explorer\Search\Default_Search_URL
*\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page
*\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\*

Add:
*\SOFTWARE\Microsoft\Internet Explorer\Styles\Use My Stylesheet
*\SOFTWARE\Microsoft\Internet Explorer\Styles\User Stylesheet
*\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\*
*\SOFTWARE\Microsoft\Internet Explorer\SearchURL\*
*\SOFTWARE\Microsoft\Internet Explorer\Control Panel\*
*\SOFTWARE\Microsoft\Internet Explorer\Download\*
*\SOFTWARE\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\SafeSites\*
*\SOFTWARE\Microsoft\Internet Explorer\ShellBrowser\*
*\SOFTWARE\Microsoft\Internet Explorer\WebBrowser\*
*\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{*}
*\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\*
*\SOFTWARE\Microsoft\Internet Explorer\PLUGINS\EXTENSION\*\location
*\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix\*
*\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\*

Important Keys:
Delete:
*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\*

Add:
HKLM\SYSTEM\ControlSet???\Control\MPRServices\*\DLLName
HKLM\SYSTEM\ControlSet???\Control\BootVerificationProgram\ImagePath
HKLM\SYSTEM\ControlSet???\Control\VirtualDeviceDrivers\VDD
HKLM\SYSTEM\ControlSet???\Control\TERMINAL SERVER\WDS\RDPWD\startupprograms
*\SOFTWARE\Microsoft\Driver Signing\Policy
*\SOFTWARE\Microsoft\Code Store Database\Distribution Units\*
*\SOFTWARE\Microsoft\Ctf\LangBarAddin\*
*\SOFTWARE\Classes\ftp\shell\open\command\*

Now Click APPY and APPLY to save the changes.

Now go to My Protected COM Interfaces, press Groups.

Windows Management:
Add:
WindowsInstaller.*
IMSIServer

Pseudo COM Interfaces - Privileges:
Delete:
LocalSecurityAuthority.Debug
LocalSecurityAuthority.Shutdown

Pseudo COM Interfaces - Important Ports:
Delete:
\RPC Control\wzcsvc
\RPC Control\spoolss

Add:
\RPC Control
\KnownDlls\*

Now Click APPY and APPLY to save the changes.

Now go to the Advanced Button.
Image Execution Control Settings, Set level to Disabled (only if you want to, i did not)
Switch tab to Files to Check, Remove *.bat, Press APPLY

Open Computer Security Policy, look for %windir%\explorer.exe change from Custom to Windows System Application (only if you want to, i did not)

Open Defense+ settings, Open the Tab Monitor Settings.
Activities to Monitor:
Untick:
Windows Messages
DNS/RPC Client Service
(only if you want to, i did not)

Objects To Monitor Against Direct Access:
Untick:
Computer Monitor
Disks
Keyboard
(only if you want to, i did not)

Now Reboot, and your configuration is migrated from CFP 3.0.x --> CIS 3.5.x
After Reboot answer your go Pro screen and enjoy CIS

If i missed something or you have questions feel free to PM me.

Ronny

[Tags:]