CFP 3.0.10.238 BETA General Feedback/Impressions (Not for Bug Reports)[CLOSED]

My salute and congratulation to the development team! I think they finally fix the following problems, though not in the bug-fixed list:

  1. multiple session of CFP.EXE left behind when different users login and logut of XP Pro without rebooting.

  2. Remote desktop unable to reconnect after a “canceled” connection when using SSH and putty

Thanks guys! This has solved a big problem for me!

In general, I’m impressed. A couple of suggestions on usability:

  • Create new applications in the Computer Security Policy window with a pre-defined policy called “Default” (which can be editted), rather than “custom”. This makes it easier to distinguish apps that have been granted permissions (and therefore changed to “custom”).

  • The Process Access Rights screen should have an indication to show when there is something in a given setting dialog (i.e., the Interprocess Memory Access dialog). Currently you need to hit the “Modify” button to discover this.

  • Allow the user to create their own groups within the Computer Security Policy window (and add processes to these group, obviously)

  • When the user allows an outbound access for an application, allow them to limit the access rule to the given destination IP address.

Nothing critical.

[QUOTE=Coolio10]Your not supposed to install it in safemode. Messes with the files. Also is your DPI 120?
[/quote]
I’ve installed many times in regular AND safe, with no change at all. I’ve also never had an issue with any previous versions installed in safe mode or otherwise.
Yes, it is 120DPI on a 22" 16:9 LCD and it’s staying that way too. I refuse to change my settings for one single program that should not have an issue with this setting. All other Beta’s (and I’ve tested most of them here) have never had an issue with the DPI setting and anyway I tested that and it also made no difference.

As you can see in the screenshot, DPI would make no difference here, the empty area of the GUI is huge. One whole half of it (plus some I would guess) is totally missing, but the GUI has huge empty spaces…it’s almost like it’s been stretched to about a 4000 pixel width and I have 1680 to work with…LOL…:frowning:

Very good points. Some of what you bring up bothered me too.

Al

After several installations the new version is running well. (Last installation was basic firewall only and defense+ enabled after full installation). For some reason the system status was “red” when enabling defense+ from the beginning.
Also needed to uninstall spyware doctor before installation. During installation CPF lists that it is incompatible with Spyware Doctor. However, seemed to have no problem when SD was re-installed afterwards.

I’m impressed with the new firewall!

Thanks

Harry

Vista 32 Business
Boclean
Avast 4.7
Spyware Doctor 5.1

CPF 3 doesn’t include parent application checking, because the HIPS will do the work.
BUT, what if you run CPF 3 with firewall only(HIPS disabled)?
It’s a big security risk, so please bring back parent application checking to CPF3!
You should be able to activate it thru Firewall->Attack Detection Settings->Misc.
Also, in the installation guide, you should be able to choose ‘Enable parent application check’ if you choose to not use the HIPS.

Ragwing

That option should only be used if you already have another HIPS. I have heard that there will be an Anti-leak mode(2.4 style leak handling) in the next release but I don’t know more (anyway this could be enough to get me “terminated” :-X).

I’ve not tested this but it should be possible to disable some Defense+ features to leave only V2 like behaviour. As the run executable access right does nearly the same thing V2 did. Anyway I did not test what D+ feature is possible to disable without affecting that.
Another thing it is imperative to not doable V3 file protection because there is no Hash checking as V3 file protection handles the same thing in a new way (which is less CPU and memory consuming)

Anyway V3 HIPS is better suited to new threats so if an user take his time to learn these new feature his protection will be way more effective than V2.

In the final version, will be “Restore factory settings” button for the firewall settings, defense + settings and for the basic rules? (like in Comodo anti-virus)

Please provide a standalone beta uninstaller (for at least Vista) prior to RTM/Gold Master status. Why? Uninstalling via “Programs and Features” [Vista] does only a partial job. For example: I have spent hours with Microsoft engineers only to find out the reason a certain Windows Update fails is … CPF. And their utter fascination with the details even exceeded mine. Ditto that I have NOT been offered a configuration choice at install the last two go-rounds. Manual config/sink-or-swim ~ i.e., you are on your own. And I canNOT reinstall other products which have MAJOR conflicts with CPF as it is not really gone. To be clear, these are the tribulations of beta-testers and I fully accept that. =o)

Just noticed the resetting issue is fixed. The logging and tracking idea i now disagree with. This would make the interface more cluttered with options and a whole page dedicated to two options? Would look silly when every other page has the perfect amount of options. I agree with the other two. Should not be too hard to add but i have no knowledge of software development so i shouldn’t be talking.

I have problems with starting windows Vista. It takes 10 min. and more. May be in learning mode. I was better with the previous beta version. For the rest, everything is fine. Installation harsh:requiring a lot of patience and good will. Installed in the more advanced HIPS mode, though. :smiley:

When programs modify registry keys , CFP can’t tell the user that the keys are created , modified , or deleted .

It can, but it’ll only do that if the registry keys are in ‘My protected registry keys’.
If you want CPF to monitor ALL registry changes, then open CPF, go to the Defense+ tab. Now click ‘My protected registry keys’. In the new window, click ‘Add’->‘Registry entries…’ and add all the items to the left.

If that’s not the case, you should post in the bug reporting topic, as CPF is meant to monitor for changes in these sub-categories of the registry.

Ragwing

Great
Just like clockwork and i am no authority but i am more than happy to learn with a little guidance.
I learnt a lot from v.2.4
One question please.
When you open the program you have Proactive Defense.I have 54 applications active and 13 files waiting for my review.What should i do about the 13 files and how do i do it?
Thanks and Regards

If you click ‘waiting for your review.’ you’ll be able to lookup the files or send them for analysis to Comodo.
I think it checks with Comodo online database, as all it return is the answer’ unknown’ for me.
You can choose to send them for analysis to Comodo so that they can/might be added in the safelist databse.
But if they’re already added it will show ‘File is safe’ or ‘Already avaliable with COMODO. Under analysis’.

Ragwing

Thanks

With reference to my post - “Reporting & Logging Improvements” & Coolio’s responses

[quote : https://forums.comodo.com/empty-t14034.0.html;msg98186#msg98186]

Thanks Melih & the team - keep up the good work.

The suggestion - “Summary –> View Active Connections Or Firewall → View Active Connections ===============================================================
The Active Connections popup doe not have a lock pane option or similar function, so if the connections are continuously being updated, the window constantly keeps getting reset and user is unable to close a connection or monitor a particular connection.”

  • too has been resolved great work guys - On more change to that section → On clicking the application in Summary → Traffic - directly take user to the application node in the ‘View Active Connections window’

[i]The suggestion - "Logging & Tracking -

Move the Firewall - ‘View Firewall Events’ & Firewall - ‘View Defense events’ and also ‘View Active Connections’ to a separate top level section called Logging?"[/i]

  • What I would suggest is a more easily accessible interface to get to the detailed logs rather than 4 clicks Right click Tray Icon → Firewall → View Firewall Logs → More
    and Right click Tray Icon → Defense → View Defense Logs → More

Perhaps a section right there on summary - displaying the links to the ‘More’ contents.
And an option using the Miscellaneous → Settings to hide / display this section

Or maybe right click tray icon → 2 options to view logs
And in Miscellaneous settings → An option to show detailed or standard logs by default

Perhaps both can be provided.

The intent of a firewall (unlike other general use software) is to display the metrics and reporting to the end user if logging; If the logs are not easily accessible / quickly available then it defeats that purpose

My other 2 suggestions still stand. A small update though %ages of incoming/outgoing on hovering over the tray icon

[i]The suggestions - "Summary - The traffic section

The traffic section does not display the relative % distribution of both incoming and outgoing and connections. A spike graph display option would also be good.

Summary –> Network Defense (GUI suggestion)

Provide link on blocked intrusion attempts to directly open Firewall - ‘View Firewall Events’[/i]

(P.s. Thanks to the others especially our friend who raised the 4 clicks issue allowed me to frame this better)

Well done everyone at Comodo, i’ve just installed the new firewall and everything seems to be working just fine (it’s hard to type when you’ve got your fingers crossed… ;D)

Wife’s Impressions. I recently installed CFP 3.0.10.238 on my wife’s Vista, Home Basic, 32 bit, AV=Trend Micro. Overall she has adjusted well. She says there are fewer popups than there were with T*M firewall. The CFP self learning only happens once in a while now, and she did comment that she liked how the CFP self learning went (she didn’t have to make too many decisions). However, she did have an instance of a bunch of CFP window popups, and she said, “These windows are popping up–I don’t know what it is–and it won’t let me do anything!” In our household, this means, “Husband, come fix it!” (the AV was running an automatic update, and she didn’t know how to activate the Installation mode on CFP). I think that there should be some sort of “read me first,” or online manual, or something to get novices through those troubling moments.

Other than this I think the beta works great. :BNC

Hurray!!!

CFP v3 has passed “The Wife Test” (TWT) :slight_smile:

Melih