Make The CIS Firewall Driver Capable of Filtering TUN Adapter Traffic

Hi, Don’t forget to vote yes in the poll above.

1. What actually happened or you saw:
When my VPN was set to use the TUN adapter, Comodo Internet Security Firewall Driver was not listed in the networking properties for the network connection, indicating that CIS was not filtering TUN adapter traffic. However CIS appears to filter TAP adapter traffic.

2. What you wanted to happen or see:
I want Comodo to develop CIS to be able to filter TUN adapter traffic and thus see the Comodo Internet Security Firewall Driver in the network property list along with the TUN adapter.

3. Why you think it is desirable:
For my VPN provider, the TUN adapter is used with their most advanced protocol. I want to take advantage of their latest tech in terms of speed and security.

4. Any other information:
Even though my VPN offers a more advanced protocol that uses TUN adapters, I need to fall back to the older OpenVPN protocol because apparently Comodo does not filter TUN traffic.

2 Likes

Maybe I’m wrong but isn’t this wish not the same as bug no. 2 on the bug list?
Anyway CIS should support the TUN adapter as well.

Hi CommodoUser2019,

Thank you for reporting, we are aware of this issue.
The team is working on it.

Thanks
C.O.M.O.D.O RT

I couldn’t locate the bug list but I did run a check against the wish list looking for keywords TUN and/or adapter.

Thank you Comodo RT.

Windows 11 24H2 x64
CIS Premium 2025 12.3.4.8162
ExpressVPN 12.201.0.12153

OMG…I’ve been searching and wondering why the Comodo Firewall was “broken/inactive” and not respecting set Firewall Application Rules!


Turns out the VPN provider I’m using, ExpressVPN, goes with a TUN adapter that doesn’t have the “COMODO Internet Security Firewall Driver” item capable of being installed, effectively making the Comodo Firewall completely useless… This is really disappointing!
ExpressVPN has a blog stating: “All legacy app versions will cease to connect after March 31, 2026. If you don’t update, the VPN will not turn on. Your internet will still work, but you will not have VPN protection until the app is updated.”
https://www.expressvpn.com/blog/update-expressvpn-to-stay-connected
And I assume all versions after and including the new requirement version are with a TUN adapter…

And based on my limited research of TUN and TAP adapters, it seems probable that TUN will be more of a standard for VPNs going forward, leaving Comodo to be more and more incompatible/outdated.

"TUN interfaces communicate directly via IP address. Because of that, there’s no need to wrap IP packets in Ethernet frames, resulting in less overhead. TUN interfaces also don’t need ARP because their IP addresses are already known.
TUN interfaces are the most commonly used virtual adapters with VPN clients. That’s because a VPN client’s most common use case is one in which a VPN endpoint simply routes IPv4 or IPv6 packets to and from the VPN server. More complex setups may require TAP."
https://www.comparitech.com/blog/vpn-privacy/tun-tap-adapters

After so many years of using Comodo Firewall, I can’t believe I have to now look for an alternative…
I don’t even know what else is even out there as a viable option or even would support firewall filtering with a TUN adapter. If anyone knows for sure of any other possible options, please share, thank you!