COMODO Internet Security 8.0.0.4337 is released!

[sAyer]

Think of it as a sandbox but not software but hardware. Five minutes and a Google search would have answered your question to start with.

[Ded_Omraz]

It’s a new Comodo official feature, that’s why I’m asking here.

[sAyer]

@Ded Omraz post:182

It’s a new Comodo official feature, that’s why I’m asking here.

Agreed. I apologize.

Server Virtualization & Hypervisors

[Netguy101]

I’ve noticed issues with enchanced protection mode enabled in the HIPS, so I leave it turned off.

[Ded_Omraz]

@sAyer post:183

Agreed. I apologize.

Server Virtualization & Hypervisors - YouTube

NP :-TU

[Netguy101]

Downloaded a zip file through uTorrent, unzipped the file with 7zip, and the unknown file was NOT sandboxed by CIS 8, I am not happy with this, Comodo please fix!

[wasgij6]

@Netguy101 post:186

Downloaded a zip file through uTorrent, unzipped the file with 7zip, and the unknown file was NOT sandboxed by CIS 8, I am not happy with this, Comodo please fix!

I’m expecting a fix in the next update. Look at the translation files. As a temp fix you can create a autosandbox rule for 7zip

[Citizen_K]

@Netguy101 post:186

Downloaded a zip file through uTorrent, unzipped the file with 7zip, and the unknown file was NOT sandboxed by CIS 8, I am not happy with this, Comodo please fix!

@wasgij6 post:187

I’m expecting a fix in the next update. Look at the translation files. As a temp fix you can create a autosandbox rule for 7zip

Or

@egemen post:62

Right so the new default configuration keeps track of files downloaded from the Internet or coming from the removable or network based media. We have collected telemetry information for about 2 years and found out that automatically sandboxing unknown executables from these sources will prevent infections.

In your case, you are testing with some VMs and have specific scenarios. You need to fine tune either CIS or your environment. CIS is flexible though. By all means you can simply switch to old way of doing things. All you need to do is to go to Rules #3 in auto-sandbox policy and remove all source criteria.

Comodo Forum

[Netguy101]

@EricJH post:188

Or
Comodo Forum

Ok I edited my rules hopefully it works…

[rChaz]

@AdamW post:179

When I disable Enhanced protection mode in the HIPS settings the CPU is detected correctly.
Also, the MS virtualization detection tool (link posted by sAyer above) says there is no virtualization support on my system when the Enhanced protection mode is enabled. Is that a bug or expected behavior? Am I the only one seeing this?

This happens for me also. (Microsoft’s Hardware-Assisted Virtualization Detection Tool returns “virtualization is not enabled” even though it is enabled in the BIOS and the CPU supports it. Also, Intel’s CPU Identification Utility returns some funky results for Cache values which it reports as 0, etc.)

I know that Win8’s Hyper-V can also be incompatible with other level 1 hypervisors, so I had suspected that Comodo v8 VT-x capabilities were what was messing with the HAV Detection Tool results. Turning off the “Enhanced Protection Mode” & rebooting allowed returning the expected results from the HAV Detection Tool & the CPU ID Utility reported cache values. I’m not sure if those are actually issues or just something to be expected from the hypervisor enabled configuration.

Anyway, good to know the interaction from the “Enhanced Protection Mode”.

[fernandoab]

@egemen post:62

Right so the new default configuration keeps track of files downloaded from the Internet or coming from the removable or network based media. We have collected telemetry information for about 2 years and found out that automatically sandboxing unknown executables from these sources will prevent infections.

In your case, you are testing with some VMs and have specific scenarios. You need to fine tune either CIS or your environment. CIS is flexible though. By all means you can simply switch to old way of doing things. All you need to do is to go to Rules #3 in auto-sandbox policy and remove all source criteria.

I attached the screenshot.

Hello,
could explain me better if I download an unknown file and not run it immediately, for example, only run it after a day or two the file would be isolated in the sandbox?

Another question, if the file is a compressed file, when unpack and run, the file would be isolated in the sandbox?

Another point, unknown files that do not meet the sandbox rules would be executed without any restrictions by the CIS?

*Remembering that my doubt is with the program in the default settings.

[Ded_Omraz]

Not a single response from the staff on what the fancy description means. Why do you post it then as a feature, if not willing to explain it?

[thug4real]

@Ded Omraz post:192

Not a single response from the staff on what the fancy description means. Why do you post it then as a feature, if not willing to explain it?

Patience more details will come from staff.

[Solarlynx]

@Solarlynx post:170

As for Chrome Canary - it got messy: the update shows mistake when Canary is unlimited through admin and shows it is updated when Canary is sandboxed. I will do some research here later.

@wasgij6 post:171

Let us know what you figure out after testing.

No need in disabling the Auto-Sandbox so far. When my sandboxed Canary showed it is ready to be updated, I just restarted it in the sandbox. And it is got updated. It has worked in this way as it must be its installer is working not sandboxed.

[Ded_Omraz]

@RealNature post:193

Patience more details will come from staff.

What you mean patience? I asked a simple question on November 19. Today is November 23 and still no answer. I refuse using unknown features.

[Melih]

@Ded Omraz post:195

What you mean patience? I asked a simple question on November 19. Today is November 23 and still no answer. I refuse using unknown features.

Hypervisor

[Ded_Omraz]

Thanks, but I was asking for your explanation on this new feature, not what hypervisor is. I was asking you to explain how this comodo feature works in real life. I see nobody cares to explain. Good bye and and good luck. Just remembered why I left last time. :-TD

[SanyaIV]

@Melih post:196

Hypervisor - Wikipedia

Is the hardware virtualization support in CIS in any way dependent on Microsoft Hyper-V or does it ONLY need the CPU to support it and the feature to be enabled in BIOS?

[HOODY]

so when will this V8 be part of the normal updating process?

[thug4real]

@HOODY post:199

so when will this V8 be part of the normal updating process?

well in 2 weeks