Kukhonjiswa imibuzo ethegiwe: Veza yonke imibuzo
  • Okugcinwe kunqolobane

Firefox update in the enterprise

Multiple banks are removing Firefox due to vulnerabilities. They have found as I have told them multiple times that there is no centralized method to ensuring firefox rem… (funda kabanzi)

Multiple banks are removing Firefox due to vulnerabilities. They have found as I have told them multiple times that there is no centralized method to ensuring firefox remains up to date. The admx files from github do set the appautoupdate and backgroundappupdate to a value of 1 to indicate updates but all PCs are at different levels from 90.0 to 95.0 and I've found that even with the auto update switch on that many pcs do not auto update due to users leaving firefox up and ignoring the restart. The autoupdate task runs only if the user is logged on and that allows users to browse with an insecure version of Firefox that can lead to data breaches. CVEs lead to threats to exploit the CVE and that leads to risk that leads to data breaches. These CVEs are tracked by the NVD and this puts security in the hands of users instead of the business and the business has decided to remove firefox from their environments due to this fact.

I know mozilla is NFP but to maintain firefox in an enterprise environment, it need a better update process such as Google Chrome and Edge Chromium.

CVE-2021-38503 CVE-2021-38504 CVE-2021-38505 CVE-2021-38506 CVE-2021-38507 CVE-2021-38508 CVE-2021-38509 CVE-2021-38510

The above are current CVEs of High risk in one environment that has decided firefox will no longer be used.

Asked by bruce92 8 izinyanga ezidlule

Last reply by Mike Kaply 5 izinyanga ezidlule

  • Okugcinwe kunqolobane

group policy

My purpose is deploy specific Certification Authority, which is available in network share, to Firefox by Active Directory group policy (Windows 2012 R2) or alternately t… (funda kabanzi)

My purpose is deploy specific Certification Authority, which is available in network share, to Firefox by Active Directory group policy (Windows 2012 R2) or alternately to set 'security. enterprise_roots' to 'enabled' so that Firefox can use Windows Certificate Store. Clients are using Firefox on Windows XP, 7, 10 and consequentially different Firefox version. Can I apply my task ? Suggestions ?

Asked by riccardo.castellani 9 izinyanga ezidlule

Last reply by Mike Kaply 9 izinyanga ezidlule

  • Okugcinwe kunqolobane

distributing a customized Firefox in small enterprise

Hello everyone, I got around 50 windows clients to deal with and I wonder how to create a customized version to distribute via Kaspersky Security Center. What I intend i… (funda kabanzi)

Hello everyone,

I got around 50 windows clients to deal with and I wonder how to create a customized version to distribute via Kaspersky Security Center.

What I intend is to create an .msi, a folder or something to install. It should include some extensions like ublock or https-everywhere and such. I also like to have a customized theme included.

There are some ressources like AutoConfig or GPO GPO or repackaging installer. But I don't know if the procedures still work since the documents are three years old and, to be honest, I didn't manage to get anything work that way.

Isn't there a simple way to roll out Firefox in a company with some customization?

Thanks.

Asked by MagisterNavis 10 izinyanga ezidlule

Last reply by Mike Kaply 10 izinyanga ezidlule

  • Okugcinwe kunqolobane

Disable "Use recommended performance settings" through policies.json

Dear Madam or Sir, there seem to be new performance settings to be available since Firefox 91: https://support.mozilla.org/en-US/kb/performance-settings While I have been… (funda kabanzi)

Dear Madam or Sir,

there seem to be new performance settings to be available since Firefox 91: https://support.mozilla.org/en-US/kb/performance-settings

While I have been able to "Use hardware acceleration when available" by using ...

{

 "policies": {
   "HardwareAcceleration": false
 }

}


... I could not find any setting to disable "Use recommended performance settings". Is there any possible way to disable this feature in dsitribution/policies.json ?

Thank you very much in advance!

Best regards

Victor

Asked by mail1155 11 izinyanga ezidlule

Last reply by cor-el 11 izinyanga ezidlule

  • Okugcinwe kunqolobane

Uninstalling Firefox silently and remotely for all users

Since Firefox allows users to install to individual profiles, how do admins go about uninstalling it for all users silently and remotely? If all 1000 PCs have 50 users, a… (funda kabanzi)

Since Firefox allows users to install to individual profiles, how do admins go about uninstalling it for all users silently and remotely? If all 1000 PCs have 50 users, all with Firefox installed to individual profiles, I can't imagine IT admins would have to find the appdata for each and every user and modify a script for each machine and every user. There must be a simpler way, right? An "Uninstall All" for Firefox?

Asked by lakamine74 1 unyaka odlule

Last reply by Mike Kaply 11 izinyanga ezidlule

  • Okugcinwe kunqolobane

New Browser Update forcing profile creation and losing all data

Good Morning, In my organization some years ago I pushed to have Firefox as our default browser and finally was accepted. It has been very good as we have over 10K employ… (funda kabanzi)

Good Morning,

In my organization some years ago I pushed to have Firefox as our default browser and finally was accepted. It has been very good as we have over 10K employees using it. However this last week there has been a new release that forces you to create a new profile, one that is achieved all of you original settings and data are gone. We are a health care organization and cannot have this. I sent the fix (about:profiles) to our triage support department. However once the old profile is chosen and made the default. It will revert back to the new one each time you restart or the next day. I need a permanent fix, is there a way to update the old profile to the new version of Firefox? Shouldnt it stay the default once you make it so? I am getting inundated with calls over this, please send the fix asap.

Asked by macros48 1 unyaka odlule

Last reply by Mike Kaply 1 unyaka odlule

  • Okugcinwe kunqolobane

Update Firefox in secure environment

I would like to get new security updates for Firefox, i dont have Internet connection so the updates must come in some other way. is it possible to download updates somew… (funda kabanzi)

I would like to get new security updates for Firefox, i dont have Internet connection so the updates must come in some other way.

is it possible to download updates somewhere and then place then on a share on a fileserver and then i can tell Firefox look for updates on this share instead of Internet.

I already use this technic for Windows Defender, i download the definition files and the enable a GPO that tell Defender that all updates are on a fileshare.

Can this be done in Firefox (or something similar?

Hope you understand what i am trying to achieve

Asked by piaggio_97 1 unyaka odlule

Last reply by Mike Kaply 1 unyaka odlule

  • Okugcinwe kunqolobane

Firefox as default browser

Good morning all We are trying to put Firefox (already installed) as the default internet browser (currently IE 11) on our fleet of machines under Windows 7. I found a Mi… (funda kabanzi)

Good morning all

We are trying to put Firefox (already installed) as the default internet browser (currently IE 11) on our fleet of machines under Windows 7.

I found a Microsoft solution which consists of modifying two values ​​in the registry:

HKCU \ Software \ Microsoft \ Windows \ Shell \ Associations \ UrlAssociations \ http (and https) at a minimum.

Concretely, the web shortcuts open well with Firefox, however when we go to menu, Firefox options, it is not considered as the default browser. (unhappy smiley: D)

And I don't want users to click on it themselves)

My question is the following, is there an easy way to change it to the default browser by GPO firefox? (which reproduces the click on this button)

Or a list of things to do in the registry to reproduce clicking on the button to set Firefox by default in the menu, options.

I did a regshot before and after clicking on this button, and compared, but it seems quite tedious to me (Keys added: 125, Values ​​added: 113, and some modified values)

Thank you in advance to all

Asked by antony.deverchin 1 unyaka odlule

Last reply by Mike Kaply 1 unyaka odlule