A. THE BUG/ISSUE (Varies from issue to issue)
Our organization has issued a Kerio Control VPN Client to my device. I use this to connect to the organizations network. But there is a very big problem: When I connect with the Kerio Control VPN Client, Comodo Firewall’s program filtering stops being effective; it can no longer see which programs connect to the Internet. All programs connect as if it there is no firewall. I started a support topic on Comodo Forum, here: https://forums.comodo.com/install-setup-configuration-help-cis/compatibility-issue-with-kerio-control-t110959.0.html;msg806826#msg806826 EricJH advised me to start a bug report. Kerio Control VPN Client installs a network adapter called “Kerio Virtual Network” on my computer. However, “COMODO Internet Security Firewall Driver”, which is responsible for traffic filtering cannot be installed on this type of adapter.
Can you reproduce the problem & if so how reliably?:
It can always be reproduced.
If you can, exact steps to reproduce. If not, exactly what you did & what happened:
1: Install Windows and bring it to working state (i.e. install device drivers and needed updates.)
2: Install Kerio VPN Client (Can be downloaded free of charge from http://download.kerio.com/dwn/kerio-control-vpnclient-win64.exe)
3: Install Comodo Internet Security 8.2.
4: Configure Comodo Internet Security to block the Internet connection for any application of your choice, e.g. Internet Explorer
5: Open Kerio VPN Client and connect to a Kerio Control server (Our organization has one, but you might have to set up one. A trial version is available.)
One or two sentences explaining what actually happened:
After step 5 above, the apps that were blocked bypass CIS and connect to the network freely
One or two sentences explaining what you expected to happen:
I expected the blocked apps to remain blocked even after the VPN connection was established
If a software compatibility problem have you tried the advice to make programs work with CIS?:
It is not a compatibility problem. It can be reproduced on any computer.
Any software except CIS/OS involved? If so - name, & exact version:
Kerio VPN Client 8.5 or later
Any other information, eg your guess at the cause, how you tried to fix it etc:
VPN Client installs a network adapter called “Kerio Virtual Network” on my computer. However, “COMODO Internet Security Firewall Driver”, which is responsible for traffic filtering cannot be installed on this type of adapter. A Comodo support person tried to help me install “COMODO Internet Security Firewall Driver” manually on the “Kerio Virtual Network” adapter but the attempt ended with an error message that said “COMODO Internet Security Firewall Driver” is not compatible with this type of network adapters.
B. YOUR SETUP
Exact CIS version & configuration:
Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:
Only Firewall and Autosandbox are enabled
Have you made any other changes to the default config? (egs here.):
- Switched to Firewall configuration.
- Set firewall to “Custom Ruleset” mode and blocked Internet Explorer
- Disabled HIPS
Have you updated (without uninstall) from CIS 5, 6 or 7?:
Have you imported a config from a previous version of CIS:
OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
Actual machine on which the issue was first encounterd:
- Windows 7 Professional edition with Service Pack 1, version 6.1.7601, 64-bit
- UAC enabled
- Administrator account
- Actual machine
Test virtual machine, created to reproduce the issue only:
- Windows 8.1 Enteprise edition with Update 1, version 6.3.9600, 32-bit
- UAC enabled
- Administrator account
- Virtual machine, running on VirtualBox v5.0.6
Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:
C. ATTACH REQUIRED FILES (delete this section (section C) after attaching required files)
Always attach the diagnostics file (instructions on how to do this provided here) and the KillSwitch Process List (instructions on how to do that provided here) and put the resulting file in a zip file. Both should then be attached to your post.
Note that additional information may be requested by the processing Moderator.
[attachment deleted by admin]