Fóram Tacaíochta Firefox for Enterprise

Our company is using Firefox. We recently have found that you can launch Command Prompt or PowerShell by typing "cmd" or "powershell" into address bar of "Open File" or "Save Page As" menu.

Since we can not accept this behavior for security reasons, we are considering disabling "Open File" and "Save Page As" feature themselves. Is there a way to realize this?

We sought options to disable these features, but could not find any so far. Or If there is alternative solution for this, that would be highly appreciated if you share your knowledge.

moved from Firefox -> Firefox for Enterprise

In Windows 10 20h2 version the config setting for firefox is not working while in Windows 7 and lower versions of Windows 10 it is working fine. The settings in js file and cfg file is correct but still it is not working in Windows 10 20h2 version. It is observed that everytime the firefox is launched it is generating new ffm.js and ffm.cfg file. If we try to edit this ffm.js file still it is not taking the updated values. it again regenerated the file. Can you please help in resolving this issue?

I am a manager of a company, and I need to let some of our employees access to our online accounts. However, they can see our username/passwords when they simply look at firefox settings. Master password is obviously not useful. I want to basically disable "show password" tab.

I looked up online all day, including other web browsers, and firefox extensions. I can't seem to find it out.

Can anyone help me with this?

With recent updates of Firefox ESR I'm seeing two master password prompts in FIPS mode when starting up Firefox. This article: https://support.mozilla.org/bm/questions/1262314 does not solve my particular problem. The problem I'm seeing behaves exactly how this user describes, except for me it only happens in FIPS mode.

My OS is SUSE Linux Enterprise Server in FIPS mode. My Firefox version is 78.6 ESR with no addons installed.

Disabling FIPS mode fixes the problem but I cannot do that as it goes against company policy.

I have attached two screen shots showing the double master password prompt and after entering the password, the remaining prompt still showing.

Any help is greatly appreciated.

Thanks!

Charles Robertson

hey all,

I get the following error ONLY for internal websites (we have our own Windows CA): SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED Yes, I could "ignore" the error, however this is not desired. I compared already the algorithm with some external certs (like Let's Encrypt). Same algorithm, no error....

Have already tried with several internal websites, but without success. Some information about the certificate: Algorithm: RSA 2048 key length Sign. Algorithm: SHA-256 with RSA Encryption V3

What is wrong? I have already tried a lot of things without success. Unfortunately, I no longer know what to do.We deploy the certificates (root+intermediate) via GPO (this works so far). We have the above mentioned problems only after switching from 68ESR to 78ESR.

Thanks in advance.

Suppose I have a "policies.json" file in the "distribution" subdirectory of my Firefox installation.

And suppose "policies.json" file contains this:

{

  "policies": {
      "WebsiteFilter": {
          "Block": [
              "*://ads.yahoo.com"
          ]
      }
  }

}

Then after restarting firefox, if I put "https://ads.yahoo.com" in the URL bar, the website is blocked and I see this: "Blocked Page", "Your organisation has blocked access to this page or web site."

BUT, if I go to "https://www.yahoo.com", (and turn on the Web Developer -> Network, (CTRL+SHIFT+E)), when this loads, it successfully manages to load: "https://ads.yahoo.com/get-user-id?ver=2&n=29657&ts=1605010286&sig=5f3e61dfa993c4da&gdpr=1&gdpr_consent=CO8qFMIO8qFMIAOACBENA9CoAP_AAH_AACiQG2Nf_X_fb3_j-_599_t0eY1f9_7_v20zjgeds-8Nyd_X_L8X_2M7vA36pr4KuR4ku3bBAQdtHOncTQmR6IlVqTPsbk2Mr7NKJ7PEilsbe2dYGH9_n9XT-ZKZ79_s___7________77______3_vpwNsAJMNS-AizEsYCSaNKoUQIQriQ6AEAFFCMLRNYQErgp2VwEfoIGAAA1ARgRAgxBRiyCAAAAAJKIgBADwQCIAiAQAAgBUgIQAEaAILACQMAgAFANCwAigCECQgyOCo5TAgIkWignkjAEoudjDCEAgAA"

which is "ads.yahoo.com" and is on the WebsiteFilter block list.

So the WebsiteFilter block is not correctly blocking loading of the URL if another URL asks it to load.

In my opinion, this is a big flaw, as one large reason to block sites in the WebsiteFilter Block list is to prevent *any* page from loading anything in the blocked list.

Therefore please can this either be fixed, or a alternative "Block" suboption provided under "WebsiteFilter" that will block direct (given in URL bar) or indirect (another page trying to load it) loads ?

I'm using firefox 82.0.2 (64 bit) on Windows

Hello everyone,

if i should use GPO and policies.json which rules will win or will both apply? Does anyone know? I have applications for a few users who need increased restrictions.

Hi All, I'm looking for a way to Disable Network Setting in under General Settings... my organization wants to disable that option in firefox!! is there any way to do that?

Thanks,

Hi,

In our Enterprise i have to deploy two versions of Firefox. The only difference between the versions is the name of the proxy server. My idea is to configure the proxy settings in two seperate mozilla.cfg files and use one global Group policy for the configuratie of both firefox versions. In the global group policy is leave the proxy setting empty.

Do you think this is possible?

Hello,

I need to secure the proxy from users, users can't modify the information and they should be locked.

I've been looking for the method and i've created 2 files mozilla.cfg and local-settings.js when i go to see the proxy setting they are not grey and it can be modified i don't know what is the reason at all ...

mozilla.cfg content :

//

// Disable updater

lockPref("app.update.enabled", false);

// make absolutely sure it is really off

lockPref("app.update.auto", false);

lockPref("app.update.mode", 0);

lockPref("app.update.service.enabled", false);

lockPref("network.proxy.type", 0);

local-settings.js content :

//

pref("general.config.filename", "mozilla.cfg");

pref("general.config.obscure_value", 0);

Path :

Mozilla.cfg = C:\Program Files\Mozilla Firefox

local-settings.js =C:\Program Files\Mozilla Firefox\defaults\pref