OS: Windows 7 Ultimate SP1 x64
CIS version: 6.0.260739.2674 (firewall)
What I did: I checked “Remember my answer” in a firewall or HIPS alert and had another of the same type of alert appear (this can be most prevalant in program installers or online games when they’re first run).
What actually happened: The “Remember my answer” checkbox didn’t have its state saved between alerts of the same type (firewall or HIPS).
What I expected to happen: The “Remember my answer” checkbox to have its state saved between alerts of the same type (firewall or HIPS).
OS: Windows 7 Ultimate SP1 x64
I’m sorry but there is underlying functionality involved here, so I would very much appreciate a bug report in standard format.
Many thanks in anticipation
Here’s the format you requested. The reason I used the simpler format was because this occurs with all firewall and HIPS alerts that have that checkbox - it’s not isolated to a specific alert. I don’t see how this is not a GUI issue.
I didn’t include bug screenshots or screenshots of related logs as it’s impossible to convey the bug in question using screenshots given that it’s related to one of the GUI elements in an alert that’s able to be manipulated (and also due to the fact that the logs can’t tell you if a checkbox was clicked or not). Having said that, if the repro instructions are followed, you should be able to spot the problem.
A. The bug/issue
- What you did:I checked "Remember my answer on a firewall or HIPS alert and got another alert of the same type.
- What actually happened or you actually saw: The “Remember my answer” checkbox didn’t have its state saved for the second alert (it reverted to being unchecked).
- What you expected to happen or see: The “Remember my answer” checkbox to have its state saved between alerts (if it was checked for a previous firewall or HIPS alert, it would be checked for the next one and vice versa).
- How you tried to fix it & what happened: I can’t find a fix on my end in the settings unless it’s buried in some obscure registry key.
- If its a software compatibility problem have you tried the compatibility fixes (link in format)?: I don’t believe that this is a compatibility issue.
- Details & exact version of any software (execpt CIS) involved (with download link unless malware): I don’t believe any other software is involved.
- Whether you can make the problem happen again, and if so exact steps to make it happen: Easily reproduced. Just trigger two HIPS or firewall alerts in a row and check the “Remember my answer” checkbox on the first one. It must be either two HIPS alerts or two firewall alerts, not one of each.
- Any other information (eg your guess regarding the cause, with reasons): I initially thought it was a GUI issue as it occured with all firewall and HIPS alerts that include the checkbox in question - it wasn’t limited to a specific alert or group of alerts.
B. Files appended. (Please zip unless screenshots).
0. A diagnostics report file (Click ‘?’ in top right of main GUI) Required for all issues): Attached
- Screenshots of the 6.0 Killswitch Process Tab (see Advanced tasks ~ Watch Activity) or 5.x Active process list. If accessible, required for all issues: Attached. Multiple screenshots were required.
- Screenshots illustrating the bug: Impossible to convey the bug in question using screenshots. See point 7 in section A for repro instructions.
- Screenshots of related CIS event logs: See point 2 above. Also, logs don’t show if a checkbox was clicked or not as far as I can tell.
- A CIS config report or file. Config file attached.
- Crash or freeze dump file: Not applicable as there is no crash or freeze.
- Screenshot of More~About page. Can be used instead of typed product and AV database version. Attached
C. Your set-up
- CIS version, AV database version & configuration used: 6.0.260739.2674 - firewall security (AV not installed)
- a) Have you updated (without uninstall) from from a previous version of CIS: No. This was a clean install after uninstalling CIS 5.12.
b) if so, have you tried a clean reinstall (without losing settings - if not please do)?: Not applicable - see point A above.
- a) Have you imported a config from a previous version of CIS: No import from a previous version was performed.
b) if so, have U tried a standard config (without losing settings - if not please do)?: Not applicable - see point A above.
- Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): “Create rules for safe applcations” is checked in both firewall and HIPS settings.
- Defense+/HIPS, Autosandbox/BBlocker, Firewall & AV security levels: D+/HIPS = Enabled (safe mode), ASB/BB = Disabled, FW = Enabled (safe mode), AV = not installed
- OS version, service pack, number of bits, UAC setting, & account type: Windows 7 Ultimate SP1 x64 - UAC on default settings under an administrator account
- Other security and utility software currently installed: VIPRE Antivirus v6.1.5493
- Other security software previously installed at any time since Windows was last installed: None that I can recall.
- Virtual machine used (Please do NOT use Virtual box): No VM used.
[attachment deleted by admin]
Having thought about this I believe this is expected behavior, unless I have misunderstood.
Making people think before deciding to save a rule I guess is good practice?
So a change, but probably intentional?
In 5.x, the “Remember my answer” checkbox would save its state between alerts of the same type. For example, if I checked “Remember my answer” on a firewall alert, it would remain checked for future firewall alerts. Same went for Defense+. Also, I think the inverse is also true (if I uncheck “Remember my answer”, it would remain unchecked for future alerts of that type).
From what I can tell, the current behaviour is a regression from 5.x.
Yes I agree, its’ a change but I think it’s intentional to increase security.
I’ll forward to frmat verified so QA are more likely to look at it, but I won’t track it unless QA accept it as a bug.
Hope that’s OK
Thank you very much for your report in standard format, with all information supplied. The care you have taken is much appreciated by Comodo, and will increase the likelihood that this bug can be fixed.
Developers may or may or may not communicate with you in the forum or by PM/IM, depending on time availability and need. Because you have supplied complete information they may be able to replicate and fix the bug without doing so.
Many thanks again
Fixed in CIS 6.1.275152.2801