1. What version of CIS, or Comodo Firewall, are you currently using:
Comodo Internet Security 7.0.312140.4101 RC
2. What actually happened or you saw
Currently the Paranoid HIPS setting will ask you about EVERYTHING which can completely stop the computer from working correctly, for example black screens, OS crashing and general freezing of the OS.
3. What you wanted to happen or see
My idea is an additional ruleset/mode that is basically Paranoid mode and Clean PC combined which means all currently installed files will be allowed but all new files will trigger alerts even if the files are known.
4. Why you think it is desirable
This would a) Fix issues coming from blocking Windows system files, b) It would add another mode that users can use that might be more what they want than the current modes and c) The HIPS rules list wouldn’t be filled with a tons of Windows system executables like ping.exe etc.
5. Any other information
This can somewhat be done by setting HIPS to Clean PC mode and turning off TVL… but then safe files won’t be stated as safe files in any alerts, they’ll be stated as unknown files, and the unrecognized files list will just become a big big pile and you’ll say “I’ll look through the several hundreds of files later” But you never do.
I would personally use this mode.