Comodo vs Windows Firewall

Discussion in 'Security and Anti-Virus Software' started by nu_D, Jul 12, 2011.

Thread Status:
Not open for further replies.
  1. nu_D

    nu_D Notebook Deity

    Reputations:
    741
    Messages:
    1,577
    Likes Received:
    1
    Trophy Points:
    55
    To be honest I'd be fine not running any time of security software but I just prefer it...it's more of a placebo effect more than anything, so I think I'm going to keep MSE.

    On that note, should I disable the defense+? Or keep it enabled? Or lower the threshold? Would it make any difference performance wise? Thanks man... (it let me +rep u :) )
     
  2. Hungry Man

    Hungry Man Notebook Virtuoso

    Reputations:
    661
    Messages:
    2,357
    Likes Received:
    0
    Trophy Points:
    55
    Performance wise you'll see no difference with Defense+ enabled or disabled. It uses very little disk IO and RAM. I mean really really little.

    Yes, I would keep defense+ enabled. I would also force Java into the sandbox as Java exploits are fairly common and very dangerous.

    By automatically sandboxing unknown applications as limited or partially limited you stop malware from performing methods of infecting your system while allowing safe software to perform properly.
     
  3. Steven

    Steven God Amongst Mere Mortals

    Reputations:
    705
    Messages:
    989
    Likes Received:
    4
    Trophy Points:
    31
    All credit goes to Hungry Man for showing me this and telling me about this but: here is the setup I use and enjoy using which Hungry Man has shown me.

    Firewall: Safe Mode

    General Settings
    Create Rules for safe applications
    Enable IPv6 filtering

    Alert Settings
    Low

    All boxes checked

    Advanced
    All boxes checked except for Monitor NDIS protocols other than TCP/IP

    ---------------------------------

    Defense+: Safe Mode

    General Settings
    Checked:
    Create rules for safe applications

    Execution Control Settings
    Enabled
    Everything checked
    Treat unrecognized files as Restricted

    Sandbox Settings
    Enabled
    All boxes checked

    Monitoring Settings
    All boxes checked
     
  4. Hungry Man

    Hungry Man Notebook Virtuoso

    Reputations:
    661
    Messages:
    2,357
    Likes Received:
    0
    Trophy Points:
    55
    Forcing any applications into a sandbox?
     
  5. nu_D

    nu_D Notebook Deity

    Reputations:
    741
    Messages:
    1,577
    Likes Received:
    1
    Trophy Points:
    55
    I'm using the same settings now as Steven, do you recommend something else Hungry?
     
  6. Hungry Man

    Hungry Man Notebook Virtuoso

    Reputations:
    661
    Messages:
    2,357
    Likes Received:
    0
    Trophy Points:
    55
    I would suggest two things -- the first of which I've personally seen stop malware from infecting my computer (through testing in VM's and my test Windows XP computer.)

    1) Sandbox Java.exe, javaw.exe, javaws.exe for both program folders (86 and 64.) Java's a big vulnerability and I've found that Limited will secure your computer while still allowing Java applications to function. If you find a site not working you can try Partially Limited. This has shown to stop exploits on my computers.

    2) Play around with settings and see what you can get away with. I've tried quite a few programs and some are able to sandbox and some aren't. The fact is that if an application CAN be sandboxed with no issues it should be, there's no real reason not to.

    My internet-facing applications are Digsby, Chrome, and Java. I've found that I can't sandbox Chrome, which is fine because Chrome is already sandboxed but I CAN sandbox both Digsby and Java, which allows me to secure two of my three major security vectors.

    Edit; To force a program into the sandbox simply go to your Defense+ tab, go to Computer Security Policy, and go to the "Always Sandbox" tab.
     
  7. Hiker

    Hiker Notebook Deity

    Reputations:
    448
    Messages:
    1,718
    Likes Received:
    1
    Trophy Points:
    56
    That's wrong. You can get Comodo Internet Security (CIS) which includes the Firewall, Defense Plus and the AV for free.

    I've been using the AV and so far find it light and problem free. It also updates more than MSE
     

    Attached Files:

  8. Hungry Man

    Hungry Man Notebook Virtuoso

    Reputations:
    661
    Messages:
    2,357
    Likes Received:
    0
    Trophy Points:
    55
    Ah, it seems you're right about that.
     
  9. nu_D

    nu_D Notebook Deity

    Reputations:
    741
    Messages:
    1,577
    Likes Received:
    1
    Trophy Points:
    55
    Isn't it just a 30-day trial? If not can you paste the link?
     
  10. Steven

    Steven God Amongst Mere Mortals

    Reputations:
    705
    Messages:
    989
    Likes Received:
    4
    Trophy Points:
    31
    Not 30 day, there is a one year trial going around for that on the Comodo Forums. And hes right, the anti-virus is free off Comodo's official site.

    Here is the one year free trial with Geek Buddy if anyone wants it:
    CIS Pro (new package) free for 1 year!

    However, If you want to use an anti-virus alongside Defense+ and the Firewall I would recommend something like Avast or Microsoft Security Essentials since they have better detection rates.
     
Loading...
Thread Status:
Not open for further replies.

Share This Page