Question about Defense+

I installed comodo firewall and upon installation I chose it to be just a firewall with leak proof enabled. But why does a pop up like ‘defense + is learning’ still exists? I checked the defense+ settings I found out that the D+ was still active.

To my understanding, the Leak Protection is a limited version of Defense+, since some monitoring of your system needs to take place in order to prevent leaks. This allows you to pass leak tests (or attacks using those methods) without being quite as all-encompassing as a full-blown installment of Defense+. As a result, those aspects of Defense+ that are utilized for leak protection need to learn your system in order to be effective.

I think the thing that is warning you is the ‘firewall’ module of COMODO. It alerts you when a program/file wants to gain internet access.