I have installed the newest version of CIS and I am having really huge problem with it. I has been working normally for a few days (7 I guess) and today I turned on computer and I tried to do two things: Back up HDDs using MAcrium Reflect Pro and workign with SQL Server 2008R2 EE. Macrium Reflect Pro only opens the windows for backing up it it would go with progress bar up to 100%. I cannot start. It cannot do anything, not even analyse the HDD before backing up.
The same with MS SQL Server 2008R2 EE, I opened SQL Server MAnagement Studio, tried to connect to server and it hangin on connecting window!!! I am sure it must have something to do with new CIS because it has not been liek this before!
EDIT. I tried to look for anything in log but it does not show anything!
I cannot start. It cannot do anything, not even analyse the HDD before backing up.
What do you mean here?
The same with MS SQL Server 2008R2 EE, I opened SQL Server MAnagement Studio, tried to connect to server and it hangin on connecting window!!! I am sure it must have something to do with new CIS because it has not been liek this before!
EDIT. I tried to look for anything in log but it does not show anything!
Where is the server situated? What happens when you temporarily disable the network firewall?
Did you try rebooting Windows? Did you make changes to your system like installing other programs around the time it started to happen ?
I have reinstalled everything including the system and currently have no problem with these applications. Seem like they are working fine. If it happens again, I’ll come back here.
Well, I am coming back again with the problem. It’s been a while since my last response because I simply wanted to read through the Comcodo help to understand this program better. Unfortunately, the applications stopped working again. I had a suggestion from Comodod team to change Global rules and Application rules of FIrewall.
I have done this.
In terms of Global Rules, I added Home network as Trusted and two new rules appeared in Global Rules:
Allow All Outgoing Requests If The Target Is [Home]
Allow All Incoming Requests If The Target Is [Home]
I hope this is what I was supposed to do. I also set Stealth Ports into “Allert Incoming Connections” to see if there are any allerts regarding network connections. I suspected that Ports would be blocked.
In terms of Application Rules, I have used the KillSwitch to find any process related to the MS SQL Express which does not get connected to SQL Server. The KillSwitch pointed at “Ssms.exe”. For this process, I used the button “Allow Application” from the Firewall Tasks which added a new rule “Allow all requests”. Even thogh I set all above, the MS SQL Server Management Studio (Ssms.exe) does not get connected to SQL Server.
I though this may not be Firewall problem, so I also run the KillSwitch and check against the Ssms.exe if the application is restricted but this is a Miscrosoft signed application and by default it runs as Trusted and not virtualized.
As the last option, I tried to diable all possible CIS Components but the problem still existed. My observation is that the problem starts when CIS Advanced Settings gets frozen (it does occasionally) and then aforementioned software strops working.
This is really weird and frustrating I am running out of ideas how to sort it. I have written again to Comodo Support.
I am not familiar with working with MS SQL Express. Can you fill me in with details?
What is the name of the SQL server executable and where it is located? Is it located on your local computer or on your local network? What IP address does it have? Do you have Filter loopback traffic enabled? If not try enabling it.
Can you post screenshots of the Firewall logs of around the time you are trying to connect to the SQL server?
Can you see what happens when you add the executables ssms.exe and the one belonging to the SQL server (in case it is installed local on your computer) to the Exclusions of Detect shellcode injections (i.e. Buffer overflow protection)?
