Comodo Firewall and Avast 7

Ask Microsoft developers to give you the answers you seek. Stop demanding answers from other companies when Microsoft needs to address this for you.
Windows is their product.
Anyone else wishing Comodo provide solutions to a Microsoft issue consider yourself warned as trolling.

I can’t speak for others, but I have no desire or intention to troll. I simply find myself expending “hopeful energy” to maintain a lock on the optimistic frequency (while delaying this year’s deployments which are Windows 7), only to get bumped off it when I see certain words from people with Comodo in their description. Apparently, I’m not the only one to have a strong reaction to those types of words. Perhaps this is our problem. In any case, it indeed isn’t resulting in any progress and is just creating more frustration while the days and weeks slip away. Thanks to everyone who did some testing, exchanged information, etc to try to steer things in a good direction. Best of luck to Comodo.

I want that we dont need firewalls and antivirus products! I wish that “the producer of an OS” provides this solution!
But wait, if “the producer of an OS” could make it, why do we have firewalls and antivirus from other companies? Are we getting trolled?
:smiley:

I thought that was CIS’s raison d’être! :wink:

Simplistic analysis and blunt solutions to complex problems are best left to radio shock-jocks and cab drivers.
This issue remains an issue because there is no obvious guilty party or easy fix.
In a single round of 3-handed ‘paper,stone,scissors’ - every player can lose.

I’m not sure MS cares even that their own W7 FW suffers due to not being compatible with Avast’s implementation of MS’s own WFP redirect API. Comodo, on the other hand, just might perceive a reason to “fix” it.

I am inclined to say that Avast is not being careful here when it does not takes into account problems with backward compatibility when deploying new technologies. CIS does differentiate between underlying technologies between XP and Vista/Win 7 when reading egemen’s comments. Avast seems to chose not to if I understand things correctly.

There’s obviously a key difference in the drivers used by different AV players. If one looks at Avira Web-guard, which is effectively the same as Avast web-shield, they’re both able to bypass Windows firewall, but only Avast is able to bypass CIS…

Does anyone know of any other AV products that have web-guard/shield technology?

If you go the other way, doesn’t everyone win?

I’m no expert on the intricacies but it seems to me that,

  1. Avast 7 does differentiate - using WFP for the ‘Web Shield’ with Windows 7 & 8 but the older API on earlier Windows versions, like my ‘old school’ XP Pro PC.

  2. On Windows 7, whatever method CIS (and not to forget MS Windows 7 firewall also) uses to intercept outbound traffic does not “see” the traffic which is going via Avast Web Shield as not having been generated by Avast itself, but according to ‘Radaghast’, this is not so for Avira’s web shield. ???

One Q what is the real security issue with Comodo Firewall and Avast 7 what is the fuss about? Bypassing Comodo Firewall because of the Avast 7 web-shield? I mean how BAD this is really? 1 from 10 for security? Anyone?

Running Avast 7 (with web-shield enabled) and CFW on Vista or Win7 effectively disables all outbound firewall rules. Any program not detected as potential malware by Avast 7 or CIS Defense+/Sandbox can connect to the Internet without the user’s knowledge and perform malicious actions. Disabling alerts for outbound connections removes an important last line of defense to stop undetected malware which could have been downloaded or copied from removable media. I would rate this at least a 4 for security.

Thank you for the great info :slight_smile:

I’m still using Avast 6 because of this problem. It’s been a while now, not sure if this will be corrected.

You’re not alone

I don’t expect this to be solved in version 5, hopes are on CIS 6 to fix this ‘issue’.

I can’t even use Avast 6! It turns into Avast 7! Avast won’t fix this firewall issue. They rushed Avast 7 and look it is full of issues. They don’t want to take responsibility.

Slightly off topic, but I was wondering if anyone has tried Avast with web-shield disabled combined with Bitdefender Trafficlight (scans http traffic) combined with Comodo Firewall.

I’m pretty sure Trafficlight does the same thing as Avast’s web-shield (although perhaps a little better protection at the cost of a little speed). They both scan all the http traffic of the PC using an anti-virus engine on the user’s PC.

If they worked well together, it’d be great…but cannot find anything online as to their compatibility.

(of course, you have to do the full install of Trafficlight, or else you won’t get the http scanning)

If you mean it automatically updates to Avast 7, you need to change the program update settings to manual update.

What’s the point in using Avast at all than? LOL! Plus even today I can’t find any reviews or tests for Bitdefender Trafficlight… Not talking as you said about compatibility…

Nah it’s more crazy than that. I download say old Avast ver 6. Disconnect from online. Try to install but the install fails as it says that it can’t download new ver Avast 7 or if online it load new ver without my permission and you can’t stop it! Some crazy s***! I have no Avast files on my PC apart from old Avast install ver 6. Avast forum ppl have no idea what’s going on LOL!

Change your date in os to one year back, then run avast 6 installer and revert date settings to current date. You must be disconnected from the internet, of course.