Comodo Dome -- Bug Report and Feature Request Thread

[Joners]

Can we get a bug report and feature request sticky like the other pages please?

One feature request id like to have would be when removing the agent from a machine have it remove that device from the list of Roaming Agents (retaining the data though, so reporting still works).

[Parker]

Joners We appreciate the recommendation. We will have the team look into this as a feature request.

[bulut]

Can we get a bug report and feature request sticky like the other pages please?

One feature request id like to have would be when removing the agent from a machine have it remove that device from the list of Roaming Agents (retaining the data though, so reporting still works).

Hey Joners,

Thanks for the input. We have this in our roadmap plus further improvements including use of Roaming Agent behind captive portals and within company network (e.g Active Directory/internal server communication cases), improvements for Agent itself and Roaming Agent Management interface.


Please keep your feedback coming and lets make this thread sticky.

[sse1177]

A Linux/Unix update agent would also be very nice.

[Samuel C]

Hello sse1177,

We would like to know more about your request, Please correct me if I'm wrong, you would like to have a roaming agent available for Linux/Unix? Thank you and looking forward to your response.

[Weatherlights]

For the firewall:
- Customized Zones
- More DHCP options (For example for PXE or multiple gateways)
- Always on VPN
- More URLs in the catalogs (e.g. youp*rn.com is not listed as pornographic).
- Site2Site VPN: Defining multiple remote networks (Not just a single range).
- Use AD Users as Administrators.
- Radius support.
- Exceptions (URL-List or patterns) for the Advanced Threat Protection

[Riley C]

Hello Weatherlights,

We appreciate the suggestions. Before we send this to the development team, we would like to know more about what you want to see in these features. The developers can flesh out these features once we can provide elaborate details.

Thank you.

[Weatherlights]

Hi Riley

thank you for your reply. Sure Hope this will explain everything a little bit:

- Customized Zones: Very simple... I want to define my own zones to organize my network and firewall rules. LAN, WIFI, DMZ and Internet are good but I have far more zones, like an AD Zone, a Guest Zone etc.
- More DHCP Options: I usually have to fallback to Microsoft DHCP for some networks since most implemented DHCP servers do not provide advanced options. For example multiple gateways, class based routes or PXE paramters. PXE is required for OS deployment for example. I would love to see the DFL as the only DHCP server in the network but for that matter it needs to provide more advanced features.
- Always on VPN: My dream is a VPN solution that is authenticating the computer and is always connected (like Microsoft Direct Access) so that computers can always access content on the local network without dailing in. Best would be if this VPN solution is online before the user logged in. I am using OpenVPN currently for this but many of my colleagues are searching for a firewall with such a feature.
- Site2Site VPN: At the moment I can just define a range of addresses that are on the remote network but this can only be a single range. But sometimes you have multiple address ranges on the remote network like 10.1.0.0/16 and 172.16.8.1/24.
- Use AD Users as Administrators: You know... just having one administrator account: Makes management easier.
- Radius support: FWL should be able to work as a radius client so that authentication can be managed by a radius server. This allows a network administrator to define more advanced security roles and manage network access from a single location.
- Exceptions for the URL-List: When an automatic updater is downloading stuff over HTTPS it needs to access files directly and will fail when a firewall intercepts the traffic (for example with a download page).

Oh and what I forgot:
- IPv6 support (if not implemented yet)
- ISO-File for the central management tool... I am using Hyper-V for virtualization and OVA is not my file type .

[Samuel C]

Hello Weatherlights,

We appreciate for providing additional details to the features. We will have our development team check on your suggestion and we will keep you posted on this forum page and to the support ticket that will be associated with the request. We greatly appreciate your suggestions which surely helps to improve the product. Thank you

[axatech]

For Comodo Dome firewall:

Google Safesearch option. This will disable searching of adult content on google search image and url.
Youtube For School. This will disable searching of adult content on youtube search.
Proxy Autoconfiguration file generation and allow from proxy to bypass certain user's (from AD) / computer MAC or IPs.
Customize Comodo Dome FW block message and Template.
Allow to send comments or errors to Admin when a page is incorrectly categorized from blocked contect page.

[Damon C]

Hi axatech ,

Thank you very much for providing us your suggestion. Your input is important to us as it will help to improve the usefulness of C1 for the entire users' community. We have submitted your request to our product team where they will review it and determine where it will fit best on the product road-map. You can expect to hear back in less than 10 business days with a time-frame for the planned implementation via email.

Regards,

Damon

[Weatherlights]

Hey.

I have something that I would call a bug or at least 'not good'.

When ever I edit a firewall rule or something similar the firewall drops all connections (This includes remote desktop and so on). This makes it quiet hard to configure anything during business hours since the users are getting disconnects and have the feeling that everything is not reliable.

It would be cool if existing connections are only dropped if the firewall rule affects them,

[Damon C]

Hi Weatherlights ,

We've created a ticket and reached you to your email. We will be waiting for your response.

Regards,

Damon

[Joners]

This evening Dome Standard has started to block Microsoft.com which isnt in any category we are blocking.

The error page being displayed is also not the custom page we have designed.

Widgets on the dome dashboard are no longer updating.

[Damon C]

Hi Joners

This evening Dome Standard has started to block Microsoft.com which isnt in any category we are blocking.

Microsoft.com is under computer & technology category , It might be occurrred due to following two reason 1. You might apply computer & technology into their policy or 2.You tried to connect one of subdomain of microsoft.com such as social.technet.microsoft.com that might be classified in another category in our database other than computer&technology . Can you provide us the full URL so that we can further investigate by answering to our message? Can you confirm if computer&technology is in your policy?. Please check the categories from classification service which is accessible over https://cwf.comodo.com/classify.php. You can enter the URL then see the category associated with it

For your 2nd and 3rd issue. We have created a ticket so that we can further investigate. Please respond to our email. Thanks