Unexpectable security holes with firewall installation

Comodo Internet Security - CIS News / Announcements / Feedback - CIS
#1

CIS 5.10.228257.2253 firewall installation, “Do NOT show alerts…” unchecked in Configuration Options.
Result:

  1. Executables are NOT on protected files in D+ policy.
  2. Computer monitor and keyboard monitoring unchecked.
  3. Threat unrecognized files as: unchecked (as I indicated it earlier).

I’m shocked. :frowning:

#2

1.Please switch the configuration to the internet security or the proactive security.

2.In the default three configurations, CIS can not block “keylog and screenlog”
SolutionI: tick the two items (for the user disabling the sandbox level)
SolutionII: switch the sandbox level to the limited or higher ones.

3.The configuration, firewall security, disables the sandbox levels.
The solution to the problem is the same as 1.

#3

That is not a bug, these are the ridiculous default settings that the developers have choose for CIS.

#4

+1.
“Allow outbound” rule in default FW settings should be changed.

#5

for CFW

#6

Yes, ridiculous and inexplicable default settings (especially the first two), because the possibility is “there” for protection.

#7

Even the documentation is inaccurate:

“COMODO - Proactive Security
…
During the setup, if only Comodo Firewall installation option is selected, the next screen allows users to select this configuration as default CIS configuration.”

#8

Help & simple GUI text mistakes - CIS