windows filtering platform

dirks · September 24, 2009, 7:57pm

Does the Comodo Firewall use the windows filtering platform on vista and windows 7?

Windows Filtering platform see here:
http://www.microsoft.com/whdc/device/network/WFP.mspx

rhgtyink · September 24, 2009, 8:45pm

Hi Dirks,

Yes it does, from version 3.8 and higher.

dirks · September 25, 2009, 6:20am

Thanks. That is very good. It will make the decision to continue with Comodo on win 7, when I move my computers to win 7 64-bit, easier.

PSchuetz · December 6, 2009, 11:44pm

Hi there,

I’m interested in this also.

Where can I verify this? Is it in the changelogs?

Here is citation needed.

regards,

PSchuetz

rhgtyink · December 7, 2009, 4:23pm

From the eventlog:

File System Filter ‘cmdGuard’ (6.0, ‎2009‎-‎11‎-‎24T09:26:22.000000000Z) has successfully loaded and registered with Filter Manager.

PSchuetz · December 26, 2009, 10:47pm

Hi there,

does the Filter Manager and File System Filter has anything todo with the Windows Filtering Platform??

I mean, doesn’t this already existing on Windows XP SP3 in the eventlog?

regards,

PSchuetz

wj32 · December 26, 2009, 11:07pm

Yes, you are correct. The Windows Filtering Platform (handled in fwpkclnt.sys) is completely separate from the Filter Manager (fltmgr.sys). Filter Manager handles minifilters for file systems (so cmdguard can protect your files), while WFP is for filtering network data. CIS does in fact use WFP in cmdhlp.sys, not cmdguard.sys.

EDIT: And if you want proof, here are some of the imports of cmdhlp.sys:

FwpmBfeStateGet0
FwpmBfeStateSubscribeChanges0
FwpmCalloutAdd0
FwpmEngineClose0
FwpmEngineOpen0
FwpmFilterAdd0
FwpmProviderAdd0
FwpmSubLayerAdd0
FwpmTransactionAbort0
FwpmTransactionBegin0
FwpmTransactionCommit0
FwpsCalloutRegister0
FwpsFlowAssociateContext0
FwpsInjectionHandleCreate0
FwpsInjectionHandleDestroy0

Violator73 · March 28, 2011, 11:51am

Hi,

Does anybody know which layers of the WFP are used? Thanks!

Citizen_K · March 28, 2011, 3:47pm

In CIS?

Violator73 · March 29, 2011, 6:22am

I thought this thread is about the firewall? My question was referring the firewall…

Citizen_K · March 29, 2011, 10:50pm

Sorry for the confusion. With CIS I mean the firewall as well as other configurations. I use CIS as generic term for the complete suite, firewall (without the av) and anti virus only.

Back on topic. You are wondering whether parts of the Windows Filter Platform are used. The answer is no.

Violator73 · March 30, 2011, 6:46am

Ok, thanks. So I assume, TDI is used? Even with Vista and Win7?

Citizen_K · March 30, 2011, 2:18pm

What is TDI?

rhgtyink · March 30, 2011, 2:22pm

No it’s not it uses WFP