Firewall configuration audit?

Is there any kind of auditing mechanism or software I can use to quickly verify that my current Comodo (free version) configuration is reasonable, state in simple terms what the security risk of any holes are, and again concisely advise as to what medicine will fix any identified issues.

I am confused, at best half the time, after allowing or blocking various alerts, as to whether or not I have opened a huge breech. I am somebody that needs the ■■■■ thing to work, as I also have work to do and in my spare time don’t wish to be piddling around trying to understand the firewall policies and intricacies. I installed Belarc advisor in the hope that it would aid in this but it seems to only report in respect of Windows Firewall.

Any thoughts appreciated.

leaktest or see on gysmo the advices of chiron ; even on help/guide , it is well explained (uncheck viruscope).
Gysmo : http://www.techsupportalert.com/
how to install comodo
Guide : Comodo Internet Security v.7.0, Antivirus protection, Firewall Software | Comodo

Thanks merke - but not what I am looking for! I am looking for a reporting tool that I can run periodically to identify holes! I don’t need to install Comodo, it’s been running on here a fair while, however latest version, seems to have undone my rules, they have been quickly fixed but it has made me realise that over time I make changes to the rules reactively to alerts. Alerts occur most of the time of course when I am in the middle of something, and I am often not really sure if I react in an appropriate way, if I am doing the right thing.

An ad-hoc report that analyses my setup would reduce concerns as to whether the setup is less than ideal.

I have to agree though Gizmo’s is a cool resource for sub-critical recommendations, tips and advice. In fact I think they probably offered the suggestion of comodo to me way back when!

ad-hoc report that analyses my setup

this question solved yet few days ago … see another topic …

Well I would say thanks merke but I dont see it - also searched on this string: “ad-hoc report that analyses my setup” and simply on “ad-hoc” I dont find it! Do you have a URL to the post?
Cheers mate!

:wink:
i must open two windows for that and i cannot write and in the same time join the link : one moment please.

Topic: Can Comodo log all outgoing traffic from a specific Software?
this link (and another) are speaking about that.

You could join also the persons who were on this topic by pm _ testing by audit is a good idea _some sites will do it for you (free) _ you can use also tools (google is your friend) for that.

But a "special programm from comodo-staff or team " that a user-lambda can use ; i do not know … i suppose that these comodo-tools are reserved at the comodo-develloper ; which you could obtain asking them it.

i wonder if micrososft essential or belac will suit you
8)

Well thanks again merke,
but I don’t see the relationship in this Topic: Can Comodo log all outgoing traffic from a specific Software?
to my question - how is it relevant?

As for Belarc I already mentioned it and it seems to only report on Windows Firewall.

Microsoft Security Essentials? My tool of choice is Comodo!

you do not mentioned exactly what you want or what your goal : in a netwok open/lan ; for your printers/tablets ; only for you to be reassured ; as mode test ; a report in real-time ; knowing is a port is open or not ; with or without running this soft (which?)… etc.
the link is relevant as long as you follow the topic : it is an audit and few suggestions are given (and few explanations).

about ms essentials and belac i did not know that it was only for windows firewall … about belac, it is on their site ; they propose audit (do not confuse with configuration of your pc).

I am looking for a reporting tool that I can run periodically to identify hole :
;D
a firewall ? funny question.

Are you speaking about port ? are you speaking about all your computer - advices to change your configuration for a better security - ? are you speaking about test leaktest ? are you speaking about a hacker-tool _ audit will be performed_ ? are you speaking about stealth port/hide port ? are you speaking of a function in comodo for informing you that you have no “holes” ? for a better protection , a firewall must be configured _ obtaining a report (console ? script? programm? ) _ balancing your need and your security.
Like i said yet, a lot of site can analyses your “holes” and firewall and security of your pc online and it is free.

For a better information or configuration and THE answer that YOU do expect ; you could join comodo-team by chat/call/email on the comodo site. or why not ; send a private message to a person who can help you (dev, moderator etc).
Thx.

Hi Merke,
You seem to be missing the point. I am fairly computer savvy (of course that’s very subjective) but that does not mean I want to spend time chiselling out a solution. I dont want to take the time to get a greater understanding of the minutia of every aspect of security or even those aspects that relate to a firewall. I have other fish to fry.

What exactly I am looking for is:
In an ideal world what I want is for a tool that identifies what aspects (limited to the role that a firewall would typically perform) of my setup have a potential risk, and an analysis of the magnitude of the risk in simple terms. High, Medium, Low. Then I can look into the minutia selectively, so limiting the time spent on the case. The sort of objective analysis that Belarc produces would be fine except for its Windows Firewall focus.

The scope for me is very general:
I am thinking of firewall in respect of the software firewall on the interface between the external world and this PC. The fact that this PC is on a home LAN is of minor importance to me as there is nothing else on the LAN, that if compromised, would present me with a serious problem. The analysis should look at ALL things that create traffic across this boundary. The type of test should be that which is adequate for the possible threats. Frankly I don’t know what a mode test is. If it is relevant ideally the analysis should incorporate it. Real time no, Ad-hoc or scheduled.

with or without running this soft (which?)… etc.
On consideration of everything employed on my PC which can be affected by traffic across the boundary. For instance if my actions have inadvertently opened ports and these ports are not required open by my legitimate software. It should be identified in the report. Often I might react to an alert at a moment when non-firewall issue are far more important, and in the heat of the moment I choose badly.

the link is relevant as long as you follow the topic : it is an audit and few suggestions are given (and few explanations).
If we are talking about this link https://forums.comodo.com/firewall-help-cis-b135.0/-t103294.0.html The link is not relevant in terms of my needs, I dont want to be wading through logs or analysing individual end-points; unless there is a particular risk. If there is a risk with the current setup then this is what the report should be underlining. Only at that point does should I concern myself with it, and on the besis again of the potential severity of the risk. I want an overview, an audit, rather than a thesis about issues that could be a risk if they have not been addressed.

about belac, it is on their site ; they propose audit (do not confuse with configuration of your pc).
Yes Belarc does a lot more than just consider the risks associated with the firewall but this has no relevance to this question. I would be able to to use the aspects of it that are relevant to firewall if it did not have the Windows Firewall limitation, it was supposed to be an example of the type of report I would like in an ideal world.

(do not confuse with configuration of your pc).
Please!

I am looking for a reporting tool that I can run periodically to identify hole : a firewall ? funny question.
If by that you mean there are always holes, perhaps, but it is about risk reduction for me, so I suppose I mean the depth of the hole, the likelihood of an exploit, and the trade off in cost. Which includes time.

Have a good day!

hi,

http://help.comodo.com/topic-84-1-496-5270-.html

and others …

a firewall ? funny question.
it is funny because a firewall must not let a ‘hole’ -open-
(do not confuse with configuration of your pc).
Please!
belac is well known about configuration of the pc but belac knows doing more things than that.

i have yet answered to you and you should read me twice.
have a good day

Hi callmeandy,

Try OPSWAT Security Score (http://www.opswat.com/products/security-score) Free

:slight_smile:

:wink:

@jhkmaster_b Cursory look that could be the beast I will give it a closer look as soon as I get the chance. Thanks mate!
@merke thanks for trying.

belac is well known about configuration of the pc but belac knows doing more things than that.

Yes I am aware of that as I already mentioned, you should read me twice!

If it appears that I have not understood you on the first read, perhaps you should consider if you are communicating effectively!
have a good day!

;D
if it is solved every one is satisfied.

You could write in russian or in french : will you be better understood ? we do not “communicate” on a forum , we are sharing : it is not the same thing (international opening is not personal help & comprehensive advice)

:smiley:

@jhkmaster_b actually OPSWAT doesn’t work with Comodo Firewall, though I think it might work with the Comodo Security Suite or whatever they call the package. Running the report I got rated as 0 for the firewall! and its primary emphasis is on Windows Firewall again.