I downgraded to CFW v8, the last version from v10 because the new version omitted some editing features from the Block List, and I found not to be as informative.
I was wondering why the Recognizer will not update to the latest version to guard against Ransomware in CFW v8 unless this was a feature only to be made available in v10 and up?
umesh
July 18, 2017, 4:47pm
#2
Yes, you should be on CIS v10.
I downgraded to CFW v8, the last version from v10 because the new version omitted some editing features from the Block List, and I found not to be as informative.
I was wondering why the Recognizer will not update to the latest version to guard against Ransomware in CFW v8 unless this was a feature only to be made available in v10 and up?
searchlight4759:
I downgraded because you omitted a PURGE button from the block list for useless files.
The only way to currently remove useless entries is to unblock them which would allow them to run if one should download and run them accidentally. V8 of CFW has these features.
This is an omission that has been acknowledged by your other developers and is on the wish list. For this reason, I have decided to downgrade because it is not considered a priority update, and I need to make sure that the firewall is blocking legitimate malware and not useless files.
The unblock application task is a new feature only present in V10. You may be confusing it with the file list which actually doesn’t have the purge function as it was re-introduced in V10.
That is a wish to add purge and remove function to the unblock application task. That task was added in V10 and does not exist in V8.
searchlight4759:
In ver 8, the feature to which I am referring is Quarantine. CFW quarantines a file in the Sandbox, and I have the option to Restore or Delete it.
In v10, you have the Block List but similar feature does not exist. Since I cannot Delete an erroneous file in v10, the only way to remove that listing from the Block List is to unblock it. However, by so doing, and the file reappears again somehow, v10 will not block it again.
The Quarantine in v8 allows me total control over the file, and allows me to verify what I want to do with it.
Can you take a print screen and upload it to https://imgur.com/ and share it with us?
Somehow i forgot about the Attach image option :o
CFW 10 have the same options inside the quarantine.
block list? i presume you mean Blocked Applications/Unblock Applications.
searchlight4759:
Yes this one. 10 lacks the option buttons in Quarantine of v8
Is the implication that v8 had the Block List and Quarantine combined as Quarantine where v10 has them separate?
The same buttons should be made available on the BlockList if I am understanding the concept.
No the block list shows files that are blocked by any component(Firewall,HIPS,Sandbox,AV). Whereas the quarantine only lists files that are quarantined by the AV. See the help on what the unblock applications task is used for: Manage Blocked Items, Blocked Applications, Comodo Internet Security | COMODO compared to quarantine: Manage Quarantined Items, Remove & Isolate suspicious files | Internet Security Help
The unblock task is going to be improved in a newer CIS version. https://forums.comodo.com/verified-wish-reports-cis/a-purge-andor-remove-button-in-unblock-application-list-m1544-m1840-t117841.0.html
