Updates failing

Comodo Internet Security - CIS Install / Setup / Configuration Help - CIS
#1

When trying to update Comodo Firewall v10.0.1.6246 on Windows 10 v1703 Build 15063.413, Website, Recognizer and Program updates all fail with Error: 0x80072ee2 - The operation timed out.

Windows Event Log shows repeated errors relating to CF: Error in checking url, hr = 0x8007139f

Internet Explorer settings have been reset to defaults and then checked to ensure that Use TLS 1.1’ and 'Use TLS 1.2 are selected.

Unless I use a VPN service I am not able to to access downloads from the Comodo download site:

Pinging download.comodo.com [2a02:1788:4fd::b2ff:5205] with 32 bytes of data:
Request timed out.
Reply from 2a02:1788:4fd::b2ff:5205: time=17ms
Reply from 2a02:1788:4fd::b2ff:5205: time=17ms
Reply from 2a02:1788:4fd::b2ff:5205: time=17ms

Ping statistics for 2a02:1788:4fd::b2ff:5205:
Packets: Sent = 4, Received = 3, Lost = 1 (25% loss),
Approximate round trip times in milli-seconds:
Minimum = 17ms, Maximum = 17ms, Average = 17ms

  • The first packet ALWAYS times out.

nslookup download.comodo.com
Server: UnKnown
Address: fe80::e63e:d7ff:fee1:be47

Non-authoritative answer:
Name: download.comodo.com
Addresses: 2a02:1788:4fd::b2ff:5205
178.255.82.5

I’ve tried clean installs a couple of times now without success (was having the same problem prior to the latest hotfix). Comodo download server address is present and active in Proxy and Host settings though this function is not in use.

#2

Force using the IPv4 address by adding 178.255.82.5 to proxy and host settings and disable the default downloads.comodo.com entry.

#3

Thanks futuretech, that did the trick! :slight_smile:

Does this mean that the issue is related to IPv6…?

#4

Yes it looks to be something on comodo end to fix their servers that use IPv6. Though to make sure its on their end, try reverting the change of using the IPv4 address and disable the firewall then check for update again. If it still times out then it needs to be fixed on comodo side, if it works then you may need to configure global rules to support IPv6.