HIPS modes Help

Comodo Internet Security - CIS Install / Setup / Configuration Help - CIS
1

Help

2

Hi 5Lqep,

Thank you for reporting, could you please provide us the below details ?

  1. CIS version ?
  2. Win version along with system bit type ?
  3. MP3 tag version ?
  4. Are you using any other security software other than CIS ?
  5. HIPS mode ?
  6. Firewall mode ?
  7. Any related screenshot ?

Thanks
C.O.M.O.D.O RT

3

Please read the help documentation to get a better understanding on how HIPS firewall and file rating works. The application is trused and HIPS and firewall are both in their default mode of safe mode which means it will not show alerts for trusted rated applicatins. Only creating an ask rule in firewall application rules will force a firewall alert for trusted rated applications in safe mode, it does not happen for HIPS when you set the rule to all ask when in safe mode. If you want HPS alerts then set HIPS to paranoid mode, for the firewall either add an ask rule for the application or set the firewall to custom ruleset mode. Comodo Internet Security, Antivirus protection, Firewall Software | Security Help

4

Do you know for sure it is actually connecting out? Check the active connections using view connections firewall task, or use TCPView from sysinternals to see if it has active connections. I doubt it does and it did DNS lookup using the DNSRPC service which can only be blocked by HIPS.

5

How to have paranoid mode where “trusted programs” are ignored but windows programs are allowed. [at]futuretech

6

I have no idea what you are asking seeing as you edited and deleted your posts so all information is lost as to what you need help with. Please explain what is the issue you are having and what are you trying to accomplish with regards to HIPS. I can only guess based on your post history that you need help understanding file groups. File Groups, Defense Security Service, Internet Protection|Comodo Internet Security

7

Hi 5Lqep,

Thank you for reporting, kindly provide us exactly what you did and what happened ?
So that we will check and update you.
Hi @futuretech Thanks for supporting.

Thanks
C.O.M.O.D.O RT

8

I asked Some apps and Windows System Apps don’t ask for HIPS. You told me to use Paranoid Mode because Windows System and some apps like mp3tag are in Whitelist.
I am asking how to have the whitelist only have Windows System apps and get HIPS for all other 3rd party Apps. Also where can see that whitelist.

9

The file list shows the ratings of applications which if they have a trusted rating means they won’t trigger alerts in safe mode for HIPS or firewall. Information about the file list and what you can do here is explained in the help link here: File List, Internet Protection, Comodo Internet Security | COMODO (note i am linking the help for the previous CIS version because somehow the help page for ver 12 is missing but it is mostly the same.) You could put HIPS back to safe mode and change file rating of all 3rd-pary apps so you get alerts, you can also disable file rating lookup and change all vendors rating to unrecognized in vendor list. File rating help page: File Rating Settings, Virus Protection, Internet Protection | CIS Help | COMODO