HIPS rules disappear randomly [M1897]

Create rules for safe applications (HIPS) enabled or disabled?

Try both. Firstly, try default – ‘Disabled’.

I made the changes you requested and it´s been completely uneventful so far. Now i´m gonna enable Create rules for safe applications (HIPS) and report again in 2 weeks.

I think it have something to do with the “saving” process. My HIPS rules just cleared itself while the computer was in use. Good thing I had my backup… But still an annoying problem.

Rules created using Training Mode and other user entries that disappear is a long-standing, known issue to Comodo Engineering.

It does not matter:

  • HIPS settings (Disabled, Clean PC, Safe, Paranoid)
    Firewall settings (Disabled, Safe, Custom, Block All)
    Any other settings (e.g. Viruscope enabled)

In other words, the issue is completely independent of COMODO settings.

If you use Training Mode to create rules (HIPS & Firewall), then those rules can disappear randomly.

Also, if you create File Groups and other entries within the COMODO GUI, then those can also randomly disappear.

The COMODO center that is responsible for working on this issue is the Ukraine.

Both the Ukraine and Beijing work groups are aware of it.

It will get fixed.

Fixes for these sorts of things take time… sometimes a long time.

Now THAT was good news. Good to know that this issue will be fixed. :smiley:

Well, it´s been more than 2 weeks later and cis has not experienced another rules disappearance incident.

Viruscope
and File Source Tracking were disabled, Create rules for safe applications (HIPS) was enabled.

That’s very useful. Perhaps ‘File Source Tracking’ was triggering it?

Many thanks.

My HIPS rules just still disappearing randomly.

Updated and my HIPS rules vanished again. And took three imports before they returned. But seems good at the moment. Now I’m not sure what had changed in the month and a half since I had exported them in that file, but nothing major or I’d have exported again I guess.

File source tracking disabled ever since the option was introduced, if anyone’s wondering. But sure wish for an option to keep tracking changes without ADS messing up backups, so just tracking date and size and comparing to those stored for files that have rules.

But about the discussion here, try something else: Export settings, say you want to save changes to current configuration, then do not click OK, as in after they’re successfully exported close the settings with cancel or X (try both), then reboot. Not trying again now, but may be one of the things that caused it.

Any fixes to this issue…? It’s been a while and still HIPS rules disappear in random. I also seem to ee that the firewall rules does this also “randomly disappearing”…Any fix for this…?

Please check this issue again when next (major) version is released.

Thanks.

Please check with CIS 10.0.0.5144 beta Thanks.

Still there.

“Disappearing Rules” bug has not yet been addressed by Comodo. Either they (the Ukraine group) cannot replicate it - or they’re unwilling to put in the time and effort - which it might take days to replicate.

I have submitted this issue directly with all requested infos multiple times to my contacts at Comodo Engineering - including the Director (China Group). I did lots of work on it.

Every time nothing becomes of it…

Hi there,

I replicated this issue now. I will report it soon.

Thanks. :slight_smile:

This bug was reported last year October and still no fix ! :-TD

Hi,

I can confirm … the bug still exist … version 8.4.0.5076.

In every reboot I loose hips rules …

Yes I removed and installed comodo again … I removed the folder … registry …
:-TD

And there is another issue that can be really annoying as well. Sometimes cmdagent.exe starts using 13% of my CPU and keeps using it. It even hold the performance of the system overall and it just returns to normal after a few seconds or minutes. o.õ

I have also been experiencing this issue for a long time. I currently have only Comodo Firewall installed am I am on version 8.4.5076, using Windows 10 Pro x64. However, I have experienced this issue through many past versions. The problem has reappeared through multiple Windows installs and fresh installs of Comodo with and without restoring previously saved configurations. I have seen previous posts that claim that users should regularly export their configurations, and the implication is that its your fault that all your rules got deleted.

There are a couple reasons why this is ridiculous… First and foremost, there is no automated way of exporting your rules, and since Comodo, for some reason that I do not understand, saves your rules in the registry, instead of a file, restoring them from a normal scheduled backup taken with normal backup software is not what I would call a user-friendly procedure… Having to locate your registry file in a system backup, mount it inside of your registry, and then copy the appropriate keys over is not as simple as simply importing or replacing a configuration file. Second of all, for someone like me who makes manual rule changes on nearly a daily basis, it is impossible for me to remember what rules I added or changed since the last backup was taken, or the last time I exported my configuration.

The behavior is always the same… I get a HIPS popup asking for permission to allow “System” to perform some operation, and immediately I know, Comodo has deleted all of my HIPS rules again. I have never had any of my firewall rules deleted. It is only the HIPS rules.

I have not made a post about this previously, because quite frankly, I have very little faith that the problem is even being investigated, much less that the problem is attempting to be fixed. I don’t say this with disrespect, as I really do appreciate Comodo Firewall’s unique set of features that are found in no other products, but based on the VAST amount of threads posted about this very issue, going back MANY years, and with seemingly no fix ever proposed, it just doesn’t seem anyone is interested in fixing the problem. For your reference, I have included below just a small portion of threads referencing the same exact problem:

https://forums.comodo.com/defense-sandbox-help-cis-b136.0/-t107569.0.html
https://forums.comodo.com/install-setup-configuration-help-cis-b137.0/-t112589.0.html
https://forums.comodo.com/defense-sandbox-help-cis-b136.0/-t100199.0.html
https://forums.comodo.com/defense-sandbox-help-cis-b136.0/-t104438.0.html
https://forums.comodo.com/defense-sandbox-help-cis-b136.0/-t56584.0.html
https://forums.comodo.com/defense-sandbox-help-cis-b136.0/-t109646.0.html
https://forums.comodo.com/defense-sandbox-help-cis/hips-forgets-rules-t103233.0.html
https://forums.comodo.com/defense-sandbox-help-cis/problem-with-hips-rules-t112561.0.html

Yeah. They need to fix this and the other issue I posted before this comment made by you. Really annoying issue as well.