 |
Comodo Firewall Pro
by Nibelung
CONFESSIONS OF AN INVETERATE FIREWALL INSTALLER
Installing a firewall on a Windows-based PC even sounds like a good idea from its very name. In a virtual world that borrows heavily from reality for its emotive terms; terms like 'virus', 'infected', 'spy' and 'trojan' , a 'firewall' does indeed sound like a good idea, and ... conjures up images of a flame-proof barrier saving you from the conflagration outside.
No-one's using 'safe room' or 'storm shutters' yet, but give it time.....
Indeed, using a combination of firewall, ant-virus software and a spy blocker would seem to have kept my PC free from trouble for some considerable time.
I've tried many firewalls, including the in-built one that comes with Windows XP, which was fine as far as it went, blocking incoming attacks but did little as far as I could see to query any suspicious outgoing use of the internet; possibly a Trojan virus giving away all my on-line banking secrets.
This got me interested in Zone Alarm, which at the time seemed like the 'industry standard', especially in the field of free software, and was definitely a 'two-way' affair, querying every new access to the internet until OK'd by you.
Then for neatness, I changed over to the all-encompassing PC Guard suite that I was entitled to for free as part of my premium Telewest (later Virginmedia) package.
This worked fine but there was always the suggestion that it was very resource-hungry, bogging my machine down to a certain extent. It also couldn't handle an internal network of 'friendly' machines trying to access my PC to use the printer, so every time my wife wanted to print from the laptop, I had to disable the firewall.
So back to a combination of Zone Alarm and AVG anti-virus I went.
I'd still have been there were it not for the week commencing 6th July 2008, when I woke to find I'd lost my internet connection, amongst thousands of others, I might add. After much to-ing and fro-ing, I established that without Zone Alarm, my access came back. The problem had been created by the issue of yet another Windows security update, which some reason made Zone Alarm treat everything as a threat, adding destinations to its error log at the rate of several a minute.
ENTER THE (COMODO) DRAGON
The solution arrived later in the day with a hurried fix to Zone Alarm, but the damage was done, seeds of dissent were sown, and off to the forums (fora?) I went, where the name 'Comodo' kept cropping up.
Comodo Firewall Pro, despite the name, is free with a lifetime licence. It comes as part of a whole range of security software, including anti-virus, anti-malware (that's spyware sent by someone called Malcolm), web-site authentication, and e-mail security, all free. I haven't ventured past the firewall yet on my main PC, since I'm quite happy to stick with the AVG 8.0 free anti-virus software until someone can give me three good reasons for changing. A colleague who's also an IT specialist tells me it's crap, but that's only one good reason. Repeating that statement three times doesn't count Jonathan.
The installation file, obtained from www.comodo.com, is a 19-mbyte download which is refreshing in itself compared to some of the 'bloat-ware' to grace my broadband lately. (iTunes - 48 meg? What's that all about then?)
Having downloaded it, the first thing I needed to do was un-install Zone Alarm. Not wishing to leave 'my IT flies undone', I turned my modem off for the duration, until prompted by the Comodo install process' need to contact the internet.
Installation went smoothly with very little input from the user. Initially, this can take a long time, around 50 minutes in my case as it respectfully suggests that you have your PC scanned for potential threats.
110,000 files later.......
For those with a single machine, that's really all there is to it. True, you CAN put the software into a 'learning mode' whilst it works out what you do, and assumes that all existing software, including executable (.exe) files must be OK.
Personally, I'd rather leave it in the default 'Safe Mode' and let it learn as it works even if this does mean more queries for you.
For anyone already used to a 'two way' firewall, this process will be familiar, and cosmetically, it's almost identical to that of Zone Alarm. For example, on the very first use of anything that contacts the outside world, you'll get a dialog box pop up asking to verify that this action is known to you. You not only get a chance to allow the action (or disallow), but also the opportunity to make Comodo 'remember' it, so that's one less query on the list for next time.
Interestingly, Comodo seems to stand guard over more files than Zone Alarm, as it guards over installation processes. There's even a switch to allow installs and updates to take place without baulking at every single file that needs updating or adding, otherwise you'd be getting pretty damned sick of the sight of that dialog box by then! It even reminds you that you've briefly lowered your guard at the end of the process, so that you can revert to 'Safe Mode'.
If I've one criticism of the Comodo firewall it's that it seems exceedingly pernickety compared to Zone Alarm which in itself was fussy compared to the seemingly very laid-back unconcerned Windows Firewall which I don't recall once informing me of anything! If this was a 3-way conversation between them, Comodo would be huffing and puffing about the fact that Excel was trying to print something (it really does do this), Zone Alarm would be reassuring that it's not trying to contact the outside world so what the heck, whilst Windows Firewall would take another puff of an exotic smoking mixture and come out with "Heh, s**t happens! Chill!"
TWEAKING IT
Like Zone Alarm, you can include any further PCs on your home network that might want to share files and printer usage without Comodo trying to hinder everything they do.
To do this you access the My Network Zones option and add a single or range of IP address(es).
For example, the most common range of home IP addresses start with 192.168.1.xxx where xxx is the machine number, the first usually being 101 - accessing your home router will show you the precise numbers in use. Personally, I also have a networked back-up drive with its own need for an IP address, similarly a networked printer (see my opinion on HP C5180), and a further PC, a laptop that gets occasional home use via a wi-fi link. It's this last aspect that makes it so important not just to let any eavesdropper have access to your network. True, you can encrypt the radio link, but limiting your IP address range to 192.168.1.101>104 helps stop another IP address being added by persons-unknown. You can even make it specific to a particular MAC number (this is like the serial number of the network card or piece of apparatus that's trying to communicate). My router already does all this, but it's nice to find that you can do it here to.
For those who trust no-one, you can even switch the monitoring level to 'Paranoid' or 'Block All' from 'Safe Mode'. However, the paranoid option will involve you in a whole barrage of queries which will baulk at practically everything you try ("Someone has f....errr.....broken wind, OK? Remember?"), although it could be useful for any PCs recovering from an attack of some kind, and I don't mean flatulence.
I mentioned two top options there, as Comodo runs not only the basic firewall in background, but a further measure called Defense+, which seems to be a cross between anti-virus and anti-spyware. I have to admit that I'm a little confused by this, since Comodo also offer all of these as separate downloads. Defense+ would appear to protect vital files from being tampered with, as in the case of Trojan and 'WORM' viruses, which often frequent the C:/Windows/System32 directory, masquerading as official files.
Now all that fuss over allowing installs to go ahead starts to make perfect sense, since they DO modify vital files.
OTHER BITS
It's recognised by the Windows Security utility, so you don't get nagged that you're not running a firewall, just because you're not running the Windows own version. Curiously, the Comodo anti-virus offering I'm trialling on my laptop isn't, so you have to agree to 'monitor it yourself' rather than be nagged by the utility that you don't appear to have any anti-virus software in place.
For those with a slow internet connection or a problem currently preventing them from accessing the web, there's a CD-ROM version you can opt to have sent home for a small consideration
A FIT OF ALTRUISM?
No not really. Quite apart form the fact that Comodo would LOVE you to buy their 'bigger brother' versions, they have a vested interest in making people feel at ease with the internet, particularly when buying things. Their speciality is SSL certification - selling their technology to those sites that show a 'padlock' when you log in to buy something. Once you know that it all becomes clearer.
CONCLUSION
This seems to be the best free firewall I've come across so far. I'd have been quite happy bumbling along with Zone Alarm, but if they can't keep up with Windows updates until after the event leaving you web-less, it doesn't bode too well for them. Luckily for me, I smelled a rat, and turned it off to see if that made any difference.
Installed using defaults, Comodo works quite nicely 'out of the box' There are more than enough user-configurable options to keep even the geekiest nerd happy (for a while at least), and once its learning process period comes to an end, it settles into the background.
Recommended.
I'll report on there anti-virus and anti-spyware alter. No sense in fixing wot ain't broke
Read the complete review |
 |
Comodo Firewall Pro
by Joe1976
---->Freeware Firewall<----
It's not very often you get something for free, Zone Alarm was good to begin with, but un-installing it started to get complicated, one of the reasons I chose to use Comodo Pro, anyone looking for a firewall, I would point them in this direction. It is 100% free so you do shouldn't really have ... to buy a fire wall these days.
----<Why Use It?>----
Comodo has a learning centre that soon gets used to how you operate your PC, after a few times of switching it on, and it has probed you for some info, it is doing what its best at, sitting back keeping a careful watch over your PC.
---->Whats It Got Zone Alarm Hasn't<----
To begin with it has both intermediate and advanced settings, so depending on your PC knowledge you will have no problem using Comodo Pro.
As usual you can stop all internet activity at the push of a button, the Defence + system, is the learning centre on this firewall, it has an array of system file scanning facilities, as well as the ability to hide files in the programs vault.
I haven't been bothered with it unless I'm installing a new program, which then it will ask how you want to install it, straight forward, it won't jump out at you every 2 minutes with warnings and alerts.
It has an automatic update centre too, you really have to get it to see the amount of useful stuff it delivers.
----<Where To Get It>----
www.personalfirewall.comodo.com/
Once installed decide what level of protection you think you need, it doesn't give you mumbo jumbo, the choices go something like - not too bothered-paranoid (paraphrased)
I've always used the best money could buy, Kaspersky, ZA Pro, McAfee Firewall, but this is a mixture of the best of all firewalls rolled into one.
---->Uninstalling<----
If you are a dedicated die hard ZA user I would say to you to use COMODO, I used ZA for a few years till I stumbled over this, When I tried to uninstall ZA I had a few problems doing so. I had to go into the registry and remove it
----<Try It>----
This along with Avast Anti virus means you can kick back and not worry about your beloved PC.
It won't cost a penny, and has converted a few die hard ZA users
Read the complete review |
