Pecos SWW<>Use Comodo Internet Security 4.0 to Lock Down Your PC Following a Windows Install or Reinstall

Use Comodo Internet Security 4.0 to Lock Down Your PC Following a Windows Install or Reinstall

In Secure your computer after a Windows install or reinstall I explain basic firewall theory and detail how you can use Comodo Internet Security (CIS) to block all traffic except traffic initiated by the Window�s Updater. Use the instructions below when running Comodo Internet Security 4.0 instead of those in the referenced article.

Make sure that your modem or the Internet cable is not connected to the Internet.

Install CIS and restart the computer
Open the Comodo Internet Security status window
Left-click the Firewall button at the top of the window
Left-click the Advanced button in the left pane
Left-click on the Network Security Policy link

If you are not connected to a LAN your Network Security Policy Window should look like Figure 1. If you are connected to a LAN your Network Security Policy Window should look like Figure 2:

Network Security Rules Before Changes - No LAN

Figure 1: The CIS Network Security Policy Application Rules window before adding and changing any application rules if NOT connected to a LAN

Network Security Rules Before Changes With LAN

Figure 2: The CIS Network Security Policy Application Rules window before adding and changing any application rules if connected to a LAN

Left-click on the Windows Updater Applications entry, and drag and drop it to the top so that it is the FIRST entry in the policy
Left-click the Add button
Left-click the Select button then hover over File Groups and Left-click Windows System Applications
Left-click the Use a Predefined Policy radio button and Left-click the drop down arrow and Left-click Trusted Application. Left-click the Apply button
Left-click on the All Applications entry, and drag and drop it to the bottom so that it is the LAST entry in the policy
Right-click the Allow All Outgoing Requests rule under All Applications and Left-click Edit�
Left-click the down arrow next to the Action: drop down list box and select Block then Left-click the Apply button in the Network Control Rule window

If you are NOT connected to a LAN your Network Security Policy Window should now look like Figure 3. If you are connected to a LAN your Network Security Policy Window should now look like Figure 4:

Network Security Rules Before Changes - No LAN

Figure 3: The CIS Network Security Policy Application Rules window should look like this after changes if not connected to a LAN

Network Security Rules Before Changes With LAN

Figure 4: The CIS Network Security Policy Application Rules window should look like this after changes if connected to a LAN

Double-check that the order of the rules in the Network Security Policy window matches the order in Figure 3 if not connected to a LAN or Figure 4 if connected to a LAN
Left-click the OK button in the Network Security Policy window
Reconnect your modem or the Internet cable to the Internet

Be sure that the blocked All Applications rule modified in steps 11-12 is the LAST entry. You can test to verify that the rules are blocking all applications by opening your browser, email program or any other application that tries to connect to the Internet. You should get a connect error. You should also now be able to successfully start the Windows update process.

Stop Sign Important! After all security updates and the latest service packs are downloaded and installed the blocked All Applications rule modified in the steps 11-12 must be modified from Block back to Allow to enable the normal operation of the firewall. Highlight the Allow All Outgoing Requests network policy and use the Edit button to modify.

I want to thank Comodo for their help with these instructions.

Pecos SoftWareWorks Home Contact Me Terms of Use Rev 09/30/10 Privacy Policy Rev 05/20/09 About Us Site Map

Tweet
© Copyright 2007-2015 Alan Norton None of the content may be used or reproduced without written authorization from Alan Norton.