How to get Comodo to re-ask for internet access when an app has changed?

I stopped using Zonealarm a while ago, and have been using Comodo since version 3.5. However I’ve never found a way to get it to REask me for permission on an application that has changed since it was last used. For example, I’m using Firefox 3.6 it asks if it can connect to the internet, I say yes and tick remember since I know I want Firefox to have access and not ask me everytime. But then I get an update to 3.6.1, the firefox.exe has changed, how do I get Comodo to reask me if I want to allow it to connect? Why does it not do this by default? Couldn’t the firefox.exe be replaced by some other .exe masquerading as firefox.exe but not really be my program?

I just upgraded to v5, but uninstalled and REinstalled it following the instructions from https://forums.comodo.com/install-setup-configuration-help-cis/installation-initial-configuration-the-hasslefree-way-cis-5x-t61645.0.html

However I still fail 25. Impersonation: Coat. How do I fix this?

how do I get Comodo to reask me if I want to allow it to connect? Why does it not do this by default?
It does from my own configuration, so i suppose that something is "defectuous" in yours, maybe safe and not custom settings or trusting mozilla as a vendor.
However I still fail 25. Impersonation: Coat. How do I fix this?
I pass everything both in cis v3 and v5, but this situation is heavily discussed. Please read, e.g.: https://forums.comodo.com/leak-testingattacksvulnerability-research/getting-accurate-leak-test-results-t61715.0.html

Well I got the leak test to work fine. Thanks for the link on that. I’ll have to wait for an app to get updated to see if I get reasked to connect to the internet.

mine doesnt re ask either

  1. if the app updates its self, automatically or manually
  2. even if I rename another app and overwrite it

latest comodo version 5…1135

proactive
firewall custom policy
defense+ safe
image exec and sandbox enabled
all monitor settings enabled

it appears that once you allow an apps path, then any trusted app with that path has access