Firewall changes required after updating to Firefox v132

After updating to v132 I have noticed a significant increase in the load times for some websites that our users connect to. Using v131.0.3 I usually see < 1 second loa… (читать ещё)

After updating to v132 I have noticed a significant increase in the load times for some websites that our users connect to. Using v131.0.3 I usually see < 1 second load times for the two websites I am monitoring but after upgrading to v132 it is consistently taking 18-19 seconds for the same page. I have tried uninstalling v132 and reverting to v131 and it immediately goes back to the much faster load times. I have also tried installing various v133 releases and I see the same performance issue as for v132.

The environment I am working in is behind a network firewall with relatively restrictive internet access and I am wondering whether there are sites that Firefox is trying to connect to for the new anti-tracking or suspicious activity features (or anything else) that are being blocked and are therefore causing timeouts and retries that are bumping the total load time up.

Can anyone think of anything else I could check or change?

Solved Архивировано 19 309

about:config -> security.pki.certificate_transparency.disable_for_spki_hashes not working as expected

Hello community :) hope everybody is doing well. I´m coming here with with asking for a help. I´m managing browsers (Google Chrome, MS Edge and Firefox) in my company v… (читать ещё)

Hello community :)

hope everybody is doing well. I´m coming here with with asking for a help.

I´m managing browsers (Google Chrome, MS Edge and Firefox) in my company via GPOs. What we´ve been dealing with since 135 version came up is having the "Did Not Connect: Potential Security Issue error page , Error insufficient cert transparency" while visiting our internal resources.

Despite of having the security.pki.certificate_transparency.disable_for_spki_hashes set up -> main three certificate hashes are correctly added, basically copying the setup from Chromium browsers , where everything works as expected , Firefox is not.

The only way how to make it work is via security.pki.certificate_transparency.disable_for_hosts , which is , of course, not desirable , because of the security risks.

Does anyone face the same issues ?

Thank you very much ya´ll

Solved Архивировано 11 352

Firefox 140.2.0esr "updating" to 141.0.3 "release" channel

Recently we've began installing Firefox 140.2.0esr to our environment via the .msi file that Mozilla provides, however we're running in to a very odd incident. After appr… (читать ещё)

Recently we've began installing Firefox 140.2.0esr to our environment via the .msi file that Mozilla provides, however we're running in to a very odd incident.

After approximately 24 hours from installing Firefox esr to devices, it appears that the application is "updating" to 141.0.3 on the "release" channel. As far as I'm aware, this shouldn't be possible to begin with. But we've applied these settings via GPO:

Computer Config > Policies > Admin Templates > Mozilla > Firefox Application Autoupdate = Disabled Pin updates to a specific version = Enabled = Set to 140.2.0 Background updater = Disabled Disable Update = Enabled Manual Update Only = Enabled

After applying the GPO, confirmed this appears within the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\ AppAutoUpdate = 0 AppUpdatePin = 140.2.0 BackgroundAppUpdate = 0 DisableAppUpdate = 1 ManualAppUpdateOnly = 1

At this point, I'm at a loss. We cannot have rapid release be what's installed in our environment. Is there something broken with 140.2.0 or are we doing something wrong here?

Solved Архивировано 18 508

Import bookmarks with a policies.json script

I'm setting up a cloud-init to make it easier to deploy Linux workstations. I want to display the various links to my sites on my Firefox browser. Bookmark my services. D… (читать ещё)

I'm setting up a cloud-init to make it easier to deploy Linux workstations. I want to display the various links to my sites on my Firefox browser. Bookmark my services. Do you think this is possible? I've already applied a rule to retrieve certificates, but it seems complicated for bookmarks.

Here's an extract  :

{

 "policies": {
   "Bookmarks": [
     {
       "Title": "Main",
       "URL": "https://service.net",
       "Folder": "Bookmarks Toolbar"
     },
     {
       "Title": "Service 1",
       "URL": "https://service1.net",
       "Folder": "Bookmarks Toolbar"
     },
     {
       "Title": "Service 2",
       "URL": "https://service2.net",
       "Folder": "Bookmarks Toolbar"
     },
     {
       "Title": "Documentation",
       "URL": "https://docs.net",
       "Folder": "Bookmarks Toolbar"
     }
   ]
 }

}

Best Regards,

Dylan

Solved Архивировано 1 195

Last Firefox ESR update took the status bar off.

Debian 12 Linux on Dell laptop. Current "updated version" Firefox ESR 128.4.0esr (64bit) I received an update notice for Firefox ESR this morning. After running the Upda… (читать ещё)

Debian 12 Linux on Dell laptop. Current "updated version" Firefox ESR 128.4.0esr (64bit) I received an update notice for Firefox ESR this morning. After running the Update, I lost the status bar. How can I get it back?

Locked Архивировано 2 361

Adding an internal range to firefox intune policy management for access control

Hi All, I want to block traffic on firefox externally for managed devices via Intune, following the import of the ADMX/ADML files into intune. I have set '\Mozilla\Firef… (читать ещё)

Hi All, I want to block traffic on firefox externally for managed devices via Intune, following the import of the ADMX/ADML files into intune.

I have set '\Mozilla\Firefox\Exceptions to blocked websites' to the following

which works, however, I also want to add hosts that are only resolving on IPs and not DNS. I can add specific IPs if known, but is there a way I can allow IP ranges? Ie

Of the included screenshot, only the wildcard for mydomain.com and the specific IP currently work

If there is a better way to do this via intune for firefox only, please let me know.

Thanks

Solved Архивировано 4 339

Force-Pinning Extension doesn't Appear to Work (GPO in Microsoft AD)

I am having the same issue as this other user here: https://www.reddit.com/r/sysadmin/comments/17wvuwh/help_pinning_extension_in_firefox_with_gpo/ Preliminaries -- Initia… (читать ещё)

I am having the same issue as this other user here: https://www.reddit.com/r/sysadmin/comments/17wvuwh/help_pinning_extension_in_firefox_with_gpo/

Preliminaries -- Initially (before trying to force-pin), I had these GPOs enabled:

Extensions to Install -> https://addons.mozilla.org/firefox/downloads/file/4410896/bitwarden_password_manager-2024.12.4.xpi

Prevent extensions from being disabled or removed ->

(Those GPOs above all work.)

What I'm trying to do: Force-pin Bitwarden.

I believe I've followed the documentation correctly (except for not including a "*" case): https://mozilla.github.io/policy-templates/#extensionsettings

I've enabled this GPO with this value:

Extension Management ->

{

 "{446900e4-71c2-419f-a6a7-df9c091e268b}": {
   "default_area": "navbar"
 }

}

After running various "GPUpdate"s and whatnot, the option to uncheck "Pin to toolbar" is still available to click.

I've verified in "about:policies#active" that the JSON item appears next to "ExtensionSettings" and that there are no errors listed in the "Errors" tab.

I've also verified that it appears in the correct location in the Registry.

Since another user had the same issue (Reddit link above), I figured it'd be a good idea to check in with y'all to see if we are missing something.

Thanks for your help!

Solved Архивировано 4 391

Mise à jour FireFox

Le 05 novembre 2024 Bonjour, Je ne parviens pas à faire la mise à jour FireFox. J'utilise un MAC OS X version 10.9.5 Processeur 2,7GHz Intel Core 15 Mémoire 8 Go 1600 M… (читать ещё)

Le 05 novembre 2024 Bonjour, Je ne parviens pas à faire la mise à jour FireFox. J'utilise un MAC OS X version 10.9.5 Processeur 2,7GHz Intel Core 15 Mémoire 8 Go 1600 MH DDR3 MERCI de bien vouloir me répondre en Français. Bonne journée. Cordialement.

Solved Архивировано 1 158

How to update Firefox ESR 115.14.0 to 128.1.0?

I'm a newbie using Debian and Deb 12 ships with Firefox ESR and I've decided to stick with it instead of the regular release, 'cause it breaks some extensions I have. How… (читать ещё)

I'm a newbie using Debian and Deb 12 ships with Firefox ESR and I've decided to stick with it instead of the regular release, 'cause it breaks some extensions I have. However, I want to upgrade to the latest ESR version, how do I do it? I tried going to (https://www.mozilla.org/en-US/firefox/all/#product-desktop-esr), but the file for linux 64 bit is a .tar.bz2 file, which I have no idea how to compile.

Locked Архивировано 2 276

Applying security settings to all user-accounts of one PC including add-ons

Hi all, For quite a while I'm working together with others on a voluntary base (nobody gets money) as members of a computer-club, a charitable NGO and NPO (in German: gem… (читать ещё)

Hi all,

For quite a while I'm working together with others on a voluntary base (nobody gets money) as members of a computer-club, a charitable NGO and NPO (in German: gemeinnütziger Verein) for seniors in order to bring them closer to the use of digital devices and media. It's not only teaching, but administrating the hard- and software as well.

I can remember that it was possible in former versions of Firefox to include at least a script into "defaults->prefs". I think it was user.js (not sure) in the installation folder to define common preferences to be fixed, like proxi settings. It always worked well, preventing non-privileged users from making any unwanted changes. As a I found out there must have been a very similar way to include add-ons (like uBlock Origin).

Unfortunately all content I found was older than about 10 years. When trying setting up Firefox as it is now, my test system didn't care about anything I've tried.

I'm talking about > 50 Windows-PC having in average 3 user profiles each (for teaching more than 400 members). We are amateurs regarding PC administration, except some network ex-professionals. "Baking" installation media including our needs, as I already found on Mozilla's pages, seems to be beyond our abilities as well as distributing a fitting profile (we don't have a MS-server), not speaking about Group Policies.

Is there any usable guideline for people like us? Today, each FF-installation looks different and I would like to unify this as easy as possible.

Solved Архивировано 10 147

How to download some older versions of Firefox for 64 bit windows.

Current version of Firefox has (1) popups to get me to download a new version, (2) tab pickup, (3) popups to show article titles, (4) popups to show … (читать ещё)

Current version of Firefox has

    (1) popups to get me to download a new version,
    (2) tab pickup,
    (3) popups to show
    article titles,
    (4) popups to show
    current URLs.

I just want to download the install programs until I get the most recent one that has none of (1) - (4).

I need to go back 1, 3, 5, 10 years?

So where on the Internet should I go to get such an old Firefox install program?

I used to really like Firefox, but changes (1) -- (2) have ruined it for me.

Solved Архивировано 6 550

mouse not responsive at right window edge (linux wayland)

Greetings! I am using the firefox enterprise version and I have noticed an issue that the browser does not capture mouse events when the pointer is at rightmost edge of t… (читать ещё)

Greetings!

I am using the firefox enterprise version and I have noticed an issue that the browser does not capture mouse events when the pointer is at rightmost edge of the firefox window. For example, on this website near the edge the pointer would initially focus on the scroll bar and then lose focus at the edge (see attached images).

This issue does not persist on x11, and only seems to exist on wayland. It also exists on other flavours of firefox on wayland.

If more information is required, feel free to send me a ping.

Solved Архивировано 4 217

Remove Enterprise from Firefox

I have recently needed to update my motherboard, and the workshop put my C: and D: drives into an old second-hand motherboard they had. I have now checked Firefox - which… (читать ещё)

I have recently needed to update my motherboard, and the workshop put my C: and D: drives into an old second-hand motherboard they had. I have now checked Firefox - which was on my C: drive, and it works with all my old bookmarks. However I seem to now be part of an 'Enterprise', which I do not want. How do I get rid of my involvement with an Enterprise within Firefox? Thanks for your help. Kanga85

Solved Архивировано 3 198

Search broken. All searches go to perplexity.ai

I want nothing to do with AI. I have unticked perplexity.ai in preferences#search but every search from the search bar and address bar goes to perplexity.ai then immediat… (читать ещё)

I want nothing to do with AI.

I have unticked perplexity.ai in preferences#search but every search from the search bar and address bar goes to perplexity.ai then immediately crashes and displays "Internal Error".

To use DDG I have to type duckduckgo.com on the address bar then search from there.

Firefox 140.4.0 ESR.

I've' scanned the PC with malwarebytes. I restored windows from a backup image I haven't made any changes to the PC at all. Was working fine in the AM but by later afternoon, it started using perplexity.ai exclusively.

How do I get rid of perplexity.ai

Solved Архивировано 3 119

Firefox is not recognizing FNC character coming from the input stream

We are allowing end user to scan 2D matrix barcode using a wedge scanner in our application. We are facing a problem where different elements of the bar code are not gett… (читать ещё)

We are allowing end user to scan 2D matrix barcode using a wedge scanner in our application. We are facing a problem where different elements of the bar code are not getting split into the application. On investigating this further, we found that Firefox browser not recognising the FNC character(input character 29) coming from input stream (barcode scanner in this case).

Solved Архивировано 4 130