Feature request: Add module (dll,sys) name in firwall logs and notifications

1

I love comodo, and I do trust it in protecting my PC more than any security product.

I would like to see what modules are trying to access the internet, or were blocked or allowed.

Lots of time I got “system” (ntoskrnl.exe) is trying to connect to the internet. but there is no way to know what sys driver or dll modules.

I see lots of time, of system/svchost in logs, but no way to know what driver/service was it.

Please add this in the notification and logs. esp for the “system” and svchost process

3 Likes
2

I think many would/will appreciate this!
:+1:

2 Likes
3

How can we get the attention of Comodo staff. I am currently using procmon which is not practical at all.

Hopefully you will add this feature soon.

4

This very useful request directly relates to the improvement item as listed by @Umut to support individual firewall rules for each Windows Service referenced here: Individual rules for each Windows Service, in the Firewall - #8 by infosec, which also ended high on the priority list by us users that Umut requested. Hope Springs Eternal.

3 Likes
5

Hi user9823742,

Thank you for reporting.
We will check and report this to the team.

Thanks
C.O.M.O.D.O RT

1 Like
6

Pump up, kindly reminder :slightly_smiling_face:

1 Like
7

Can you please at least add the PID for the process in the next release, this will help a lot, as there are tens of scvhost instances, the PID will direct the module and it is super easy to add.