Firewall does not show alerts in Safe Mode

[PiotrM]

Version: 12.2.2.8012 (Windows 7)

I have installed new apps recently that use internet connection.
I noticed firewall did not show alerts for any of them!
Also there were no HIPS alerts.

Important options in Firewall Settings:
Do not show popup alerts is UNCHECKED
Create rules for safe applications is UNCHECKED
Set alert frequency level is UNCHECKED

Important options in HIPS Settings:
Do not show popup alerts is UNCHECKED
Create rules for safe applications is UNCHECKED

Also in Firewall application rules there were only couple of applications and some "generic" like:
system
comodo internet security
windows updater applications
windows system applications

I removed all rules and restarted computer.

It did not help. Still no alerts...

[futuretech]

It is by design, your not supposed the get alerts from trusted applications, only those with an unrecognized rating will trigger alerts.

[PiotrM]

Where I can read more about this "trust" classification?
Also as a user I would like to have possibility to block internet access even for "trusted" applications
Trust is not 100% objective term. Someone can trust one application and other might not. And they are both "right".

[futuretech]

Read the help documentation, for starters the file rating section and the unknow file scanning process. You can also just change the firewall mode to custom-ruleset mode.

[PiotrM]

Thank you very much!
I have read it and it was ... calming
Still, please consider at least some log, so we can review what apps were granted access.
Currently Firewall Log Events is empty.
There is Connection View but it's only snapshot at given time.

[domo78]

Important options in Firewall Settings:
Do not show popup alerts is UNCHECKED
Create rules for safe applications is UNCHECKED
Set alert frequency level is UNCHECKED

Important options in HIPS Settings:
Do not show popup alerts is UNCHECKED
Create rules for safe applications is UNCHECKED

as a reminder:
https://help.comodo.com/topic-72-1-766-9172-General-Firewall-Settings.html

On my laptop:
- Do not show popup alerts is UNCHECKED
- Create rules for safe applications is Checked (this is necessary if you want application rules to be created in "Safe Mode" by Comodo FW)
- Set alert frequency level is High

You can then apply to each "application rules " a "Firewall Rule Sets"

[PiotrM]

Hi domo78

I read in different topics that
Create rules for safe applications
is buggy and should not be used.

I set temporarily "Alert frequency" to "Very High" and still no alerts were presented.

[domo78]

Hi domo78

I read in different topics that
Create rules for safe applications
is buggy and should not be used.

I set temporarily "Alert frequency" to "Very High" and still no alerts were presented.

It is buggy in HIPS not in the FW

[ZorKas]

You are on the right network ?

[CISfan]

Maybe an active VPN connection bypasses CIS Firewall.

[PiotrM]

I do not use VPN.

Anyways, I checked create rules for safe applications and all apps were added
So at least I now see what was/is allowed to connect

Thank you!

[domo78]

Anyways, I checked create rules for safe applications and all apps were added
So at least I now see what was/is allowed to connect

Good news.
If you wish you can then apply to each "application rule" a "Firewall Rule Set" (Web browser, Email client, ...) by adapting it to your needs.

[PiotrM]

I already blocked some applications

Couple of months I had some issues with HIPS,
and then I disabled "create rules for safe apps" for both HIPS & firewall.
I must have misunderstand that it was general problem, not HIPS only issue.