CFP/CIS stores configuration in registry (V=3.5.53896.424; X32)

[Guest]

[LaserWraith]

Did you do the full install ? or did you leave out the AV ?

I left out the AV.  0 is Proactive.  So I really have 112.

BTW, why did you white out the version #?  Should people not know what it is?

[Ronny]

no it was supposed to not mess up the picture :-))

[nmalinoski]

By count of the registry, I have 82 main records for Defense+, but most of my records are custom policies with allow lists that reach 50+ entries themselves, which I'm sure severely adds to the registry bloat. Please tell me there's something in the works to move Comodo's rules out of the registry.

[malbeth]

268 D+ application entries at the moment, no idea how many rules of course.

Now are we really asking for the D+ rules database to be moved from the registry? We sure want to speed adding D+ rules up, but the exact method of achieving this doesn't look obvious. For one, how about restoring earlier 3.0 algorithms (pre-3.0.14 I believe) that didn't seem to cause the slowdown at all?

[Thunderbear]

190 D+ records ATM, mostly Custom Policy. Still growing because reinstall of everything after a total HDD crasch. Thanks heaven for automatic backup of all important data.
Estimated about 230 records when all is finished.
So yes, registry isn't a good place to store all this, it makes D+ very slow and some program times out when D+ processing their alerts.

BTW, I use full install of CIS.

[WotC]

I always though of having a lean system and a lean comodo database. however, checking the registry explains the terrible delays. please, switch to e.g. an sqlite database. can't be too difficult, can it?

[Bam]

HKLM\SYSTEM\Software\Comodo\Firewall Pro as a .reg file 6.40MB, and contains 43300+ files (values) in
17000+ dirs (keys).

Defense+ contains 370+ items.


Alert creation: every 20+, yes 20+ seconds and sorting out.

Using profiles and not each time storing the complete profile's detail would downgrade the lot.

 

[weaker]

Exported to a reg-file I also have 2 MB in HKLM\SYSTEM\Software\Comodo\Firewall Pro and the D+ answers are getting slower and slower.
Comodo, please fix this!

[Bam]

Since using Defense+... every 1½MegaByte .reg file added registry values equals Comodo to saving the config (hanging basically) an extra 5+ seconds.

the way Windows works... if it'd be on a quad Intel i7.. would not make much difference in time once a similar configuration..

It is during that timeperiod possible to use other programs, rarely an application that cannot handle this: a crash will occur, either with the program or Comodo.

 

[MrBrian]

I guess I'll be staying with v3.0.14.276 due to this issue. 

[00hmh]

Is there an FAQ entry or warning regarding this problem and are measures to minimize impact discussed anywhere besides this thread?

[MrBrian]

Is there an FAQ entry or warning regarding this problem and are measures to minimize impact discussed anywhere besides this thread?

There is thread on this issue for an older version at http://forums.comodo.com/empty-t21315.0.html

[nmalinoski]

Has there been any feedback regarding this?

[Ronny]

Latest i know of is that they are aware of this issue but it's not high priority.

You can prevent the huge delays by making most of the applications "trusted" instead of custom.
Just don't make browsers/email clients / torrent apps etc trusted, they have to much internet interaction and could therefore be exposed to exploits from the internet.

[BigMike]

Hm, at the moment, I've for
HIPS: 4155 Subkeys with 7869 values in the policy key
Firewall: 414 Subkeys with 1408 values in the policy key

And making any application "trusted" isn't a goog solution! Consider that trusted applications have far too much rights, which isn't needed for most applications. For example, trusted applications may access the complete registry by default - and this means also your D+ and Firewall settings! They may also access your system directories! Then you can also disable D+ completely...
Do you really trust all your applications? Can you be sure, that the programmers did all right and the application won't do anything, which ruins your setup?

[Tags:]