I just installed Comodo CIS. I have received a few Firewall alerts about connection attempts. One for port 135 and one for port 445. As I attempt to investigate the issue, I notice that the alert disappears after a minute or so. Does that mean it was allowed or blocked? This is not addressed in the help file. Then I go to the Firewall Event log and see that nothing is logged. Shouldn’t there be an entry there about the alert?
If an alert goes unanswered, CIS will BLOCK but not REMEMBER, so the block is only a per session block.
You can increase the time a Firewall alert is displayed by clicking FIREWALL → ADVANCED → FIREWALL BEHAVIOUR SETTINGS → GENERAL SETTINGS. The current default is 120 seconds. Maximum allowable is 300 seconds.
Similarly, Defense+ alerts can be modified by clicking DEFENSE+ → ADVANCED → DEFENSE+ SETTINGS → GENERAL SETTINGS. The current default is 120 seconds. Maximum allowable is 300 seconds.
thanks a lot mate for your reply
just one more question: if I hit the “Cancel” button instead? what about its meaning?
Can I think to it like a “skip” button or more properly like a sort of “Remind me later that question”?
So there wont be any kind of block or allow. Am I right?
I’m talking about CPF v3 that it’s the one I’m using.