If I may, I'd like to suggest that in future updates (regardless of FW feature being added or removed) :
update process (pre/post ..., whatever) should NOT (!!!) detach active VPNs that are not related to CMS.
I'm using non Comodo product for VPN (FW, compression and more) and just after updating CMS it was disabled.
This is an unjustified misuse of device admin given to CMS