HIPS rules disappear randomly [M1897]

I don’t use CIS (since the appearance of this bug years ago), and i don’t recommend it anymore to anyone on my forum until it is fixed.
Wasting hours to setup CIS very tight then lose ALL rules and settings is a HUGE security flaw, you won’t trust a software that can’t keep your setting/rules permanently… since the rules disappears without warning, your system may be compromised until you noticed it, which may be too late.

Instead of adding stupid useless features on every versions, fix the ■■■■ bug !

I am sorry but being that it happens in Safe Mode it would be very low on a list of many bugs to fix.

Please note in Safe Mode all delete rules are replace again if you want specific rules kept which you have made run Defence+ in Paranoid mode.

Thank you

Dennis

It doesn’t happen only in Safe Mode. IT happens all the time - in the Admin account, in the SU account and in Safe Mode - and has been reported as early as 2006. Over the years there have been many reports submitted about this issue.

I have reported this issue repeatedly - with all requested memory dumps, configuration files, logs, etc, etc - at the repeated request of both Herb Zhang - Director of COMODO Engineering (Beijing, China) and Artyom (Ukraine - responsible for the rules modules).

I have had repeated, extensive contact with both Herb Zhang and Artyom.

Also, it has been submitted repeatedly to BuketB.

This “disappearing rules” bug needs to be fixed.

If it was on safe mode only, i won’t even bother posting about it…but i get (really, really, really) annoyed that i can’t use CFW anymore because this bug.

Yes it does need to be fixed, but so do alot of other bugs.

I am afraid if it was top priority it would have fixed, so I have to presume it is not, or by fixing it they create numerous other problems.

Thank you for all your efforts in providing the information they needed and they should know how to by now :slight_smile:

Dennis

Please check with Comodo Internet Security V10.0.0.6071 Beta thanks.

Actually this is fixed in 10.0.0.6071 Beta moving to resolved if you somehow still experience this issue please make a reply here or inform a bug board moderator via PM thanks.

I´ll try the beta, thank you. However, it is been some time since this bug has affected me. It was present for awhile, then it went away.

The disappearing rules is not fixed.

Install CIS 10.

Enable both HIPS and Firewall Training Modes.

Execute just about every installed program - including control panel items - and the rules will disappear.

I can reproduce this issue following the above at-will.

Don’t contact me; I don’t want to be bothered with CIS any longer.

It was marked as fixed by mistake in the forums. Not fixed in tracker.

Lol, CIS auto-reformat his brain !!! that is AI :stuck_out_tongue:

Still in the resolved forum?

Should be moved to Verified by a moderator. Not fixed, yet.

Good morning to you, it’s my first post and I apologize if I ask a stupid question.
By updating CIS to the latest version I noticed that all HIPS rules ( i use Safe mode )were missing and CClenare (which could not be installed up to 2 days ago) has been magically installed without any problems. I wonder is it all normal?

Welcome to the Comodo forums.

I split your post from the piriform ccleaner topic because the problem may be not only about ccleaner.

Did CIS make a back up configuration that shows up under Configuration? What happens when you activate it? Please reboot when asked.

What version of Ccleaner are you trying to install? Can you check the logs to see what they say upon installing ccleaner?

Good morning and thank you for the answer,
I have updated CIS to version v10.0.2.6396 and the version of CCleaner that I installed was 536. I personally save a backup of my configuration before updating, if I use I will retrieve HIPS rules?

How did you update to the newest version? Also can you check the configuration section to see if more than 3 configuration profiles exist? Do you happen to have create rules for safe applications enabled under HIPS settings?

Good evening, I use proactive configuration (I’ve verified and there are only 3 standard configurations). I updated CIS through the test server. In the previous CIS version i’ve created rules for safe applications but now they’re gone. The present situation is that in the attached picture. it’s normal ? On my PC I have windows 10 build 1709. Thanks for the help.

No that is not normal. It is caused by having create rules for safe apps enabled, which is redundant when HIPS is set to safe mode. The rules get erased under some certain situations especially under heavy system use, thus I would not leave that option enabled unless you have a specific reason to.
From the help:

Background Note: Prior to version 4.x, CIS would automatically add an allow rule for 'safe' files to the rules interface. This allowed advanced users to have granular control over rules but could also lead to a cluttered rules interface. The automatic addition of 'allow' rules and the corresponding requirement to learn the behavior of applications that are already considered 'safe' also took a toll on system resources. In version 4.x and above, 'allow' rules for applications considered 'safe' are not automatically created - simplifying the rules interface and cutting resource overhead with no loss in security. Advanced users can re-enable this setting if they require the ability to edit rules for safe applications (or, informally, if they preferred the way rules were created in CIS version 3.x)

Good evening,
from the attached image you see that the option to automatically create rules for secure applications is not enabled. If I use the configuration I saved I will find the old rules?
Do I need to upgrade to the new beta?