New CIS 2024 version - WEB Protection

HI,
Is WEB protection present in this new version? Does CIC 2024 also protect against phishing, malicious websites, MITM, etc…?

1 Like

Delivery vs Payload

All the mechanisms you mentioned are merely “Delivery” mechanisms.
Phishing, malicious websites etc are all means to “Delivery” malicious “payload”…
Comodo protects you from malicious “Payloads” no matter where they come from…
https://www.youtube.com/watch?v=Frx52YMHZ24 Watch this video to understand the technology behind this “Payload Protection”.

A lot of companies are chasing their tails trying to “detect” different “delivery mechanisms” in order to stop the payload. This is an unsolvalbe problem. This is why Comodo has invented a whole new technology to focus on the “Payload”. Afterall doesn’t matter how they get in, as long as you protect against the Payload you are ok.

Ok thanks Melih, but how does it act in case of data theft inserted on a site that appears to be the real one but is actually a phishing site?

Requested the great Comodo team of developers early on to add/improve on the web filtering/antiphising protection on the upcoming CIS 2024 stable version once it’s released along with adding very very important components like a strong Network intrusion detection/prevention module to the firewall to protect all users against any kinda latest/old network based attacks & hack attempts whatever it might be , hopefully it be added on CIS 2024 stable version for the best protection & security for all Comodo users & lovers worldwide

1 Like

Let’s hope… Because the real strong point of CIS is containment, but if other protection modules are integrated/improved, such as the WEB one, then it will be a complete product.

1 Like

Protecting Data vs Protecting against malicious code running in your computer are two very different attacks…

Data protection is a very difficult and different field…nothing stopping someone taking a screenshot etc
etc…Thats why we have DLP (Data Loss Protection) capabilities but for enterprise only.

**One simple rule re: Phishing sites: **
You NEVER ever click on a link and enter data…
You ALWAYS type the URL yourself on the browser address bar that you know to be good.
This simple rule served me well all these years.

2 Likes

Perfect very well said a good & strong web filtering/antiphising protection is a much much necessary component for any security software program in modern cyber world despite whatever other methods/layers of protection they already have, so we all are hoping for the same from Comodo as well

Thanks for the simple rules :smiley:

All that you need :wink:

Strong web filtering etc.

Will never protect you from the one most important item.

Dennis

1 Like

Phishing relies on faking the URL to make you think its a real one…
If you ONLY rely on yourself to enter the URL for entering data, you should be safe.

But if the link is too long with various characters it is unthinkable to write it by hand every time, in today’s world you click on it and the web page opens, the AV must protect the user at least with a percentage that goes over 90% to be reliable, then there will always be a percentage at risk and the browser, a possible additional extension or human attention comes into play… You cannot expect to write all the websites by hand in a browser…

1 Like

What about the majority of users who browses several websites for various reasons & it is the basic need for any modern antimalware softwares to have a good quality web filtering & antiphising protection integrated into it

That is correct. With the same token you do not enter your personal details to every website, personal details into like your social security, credit cards and so on.

My point is: If the data you are entering is valuable (eg: social security number, credit card etc) then make sure you went to that website by typing the main domain name. Once you are on that domain, its ok to click around that domain, because you already validated it by going there by hand in the first place.

Web filtering is a “detection” based technology and you only need to get it wrong once to lose all your personal data… Because of this, its worth typing the domain by hand IF and ONLY if i will be entering some confidential data. Lets be honest thats a tiny percentage of the web usage.