Comodo “Active Connections” shows frequent cmdagent.exe high volume (>90Mb) traffic. Specifically it shows as “TCP Out” with a destination address 220.127.116.11:80. I run an application (NetMeter) that shows this traffic as a download not an upload which I interprete the Active Connection indication. This traffic is very frequent. Is this normal?? and OK??
It depends on your needs if you should permit it. If you use the Comodo AV and/or cloud features then you may need these ports open and the traffic you see would be updates.