Cis settings.

Just wondering what settings are reccommended for heuristics for the av, and firewall and defense plus when as sure as you can be, your computer is clean?. i understand i may get quite a few fps if i use max on heuristics, and am thinking medium may be ok, but also think detection rate may suffer. Network defense is currently in safe mode, and proactive in clean pc mode. Have i got it right? (CLY) :comodomarryme:.

For D+ clean pc mode is great (of course, like you said, if you are completely sure your PC is clean)
you’ll get less pop ups.

Clean PC Mode: From the time you set the slider to ‘Clean PC Mode’, Defense+ will learn the activities of the applications currently installed on the computer while all new executables introduced to the system are monitored and controlled. This patent-pending mode of operation is the recommended option on a new computer or one that the user knows to be clean of malware and other threats. From this point onwards Defense+ will alert the user whenever a new, unrecognized application is being installed. In this mode, the files in ‘My Pending Files’ are excluded from being considered as clean and are monitored and controlled.

For firewall, Safe mode and custom policy are your only choices. Both offer the same amount of protection, but you’ll get less pop ups in safe mode becuase CIS will create allow rules for applications that are on its White list. (where as custom policy is for users who want to know and be in control of ALL applications including safe ones.)

So for the firewall, if you want less pop ups use Safe Mode. :slight_smile:

what about heuristics for the av?

At the moment, I’ve got heuristics set to low for real-time, manual, and scheduled scanning. Comodo’s detection rate of malware is pretty decent, and defense+ is bulletproof against malware if you use it right, so you could turn off heuristics if you wanted - only if you’re good with defense+ alerts though (:WIN)

When the new CIMA based heuristics comes out (March?), I may consider upping the heuristics level, because there should be less FP’s :SMLR

The best way is to leave setting to Low, especially in real time scanner. Medium or High settings causes lots of false positives. I use medium settings in on demand scanner, but I want to decrease number of FP by sending it to COMODO (:KWL)