Guys, you really should keep an open mind on these things. Don’t let a product become a quasi-religion ;D
I love what Comodo is trying to achieve, most definitely, however certain aspects are not thought out sufficiently from an average or even intermediate user perspective.
If you are an advanced techie and want to spend a lot of your life with your head in your PC, that’s great, that’s either your job or your hobby. You must know or want to know how to play with CIS and you can optimise it greatly. That is good news for your security.
I like IT as a hobby but do not have enough time to get my head completely into networking and security threat issues to allow me to adequately configure CIS for most scenarios for me. I use a laptop in lots of locations and need different rules for different locations and CIS is not easy to config, at least not for me.
Beyond that, there are now several tests mentioned on other threads such as the spyshelter tests where CIS does not work adequately on default settings and even on pro-active settings for some things. Sandbox is also not adequately dealing with these things. Sure enough, eventually they will be fixed, but even then some users have been waiting a long time for advanced svchost handling and nothing done so far.
I have in the past couple of days done these tests with PrivateFirewall 7.0 (PFW) and it on default settings whilst still in the training period it kicks in immediately and allow you to deny the exe and then it fully blocks it :P0l
That is unlike CIS either failing or giving more alerts that do not allow the exe to be contained and gives access to screenshots, microphone etc. PFW also has zones which are ideal for me. Yes I am potentially concerned that it does not score as high as CIS in Matsousec challenge for sure, but one issue I can see for those tests is that the firewalls are not tested according consistently - they are not all on their default setting, or not all on their max setting, but a mixture. That’s comparing apples and oranges, or worse.
I look forward to CIS fixing issues and improving the product for the non-advanced user and then I will test more to see if I can use it again with more confidence. In the meantime PFW is looking good :-\
By the way, also tested Online Armour and incredibly I was alerted to 2 unsigned device drivers! :o
It may be an error on their part, but that is inexcusable for a security company! I progressed no further with it and moved on to PFW instead.