Showing questions tagged: Show all questions

Can no longer play media with Firefox ESR 102.x

Hello, ever since we moved endpoints from Firefox ESR 91.13 to 102.3, it has become impossible to play any media with Firefox. No video will play in youtube, for instance… (read more)

Hello, ever since we moved endpoints from Firefox ESR 91.13 to 102.3, it has become impossible to play any media with Firefox.

No video will play in youtube, for instance (it just loads endlessly as if it would start, but it doesn't).

Can't use radio websites either. Anything with a "play" button (video or sound) does nothing.

This has been tested with a clean profile, a clean install, after allowing autoplay in the settings.

Is there any info on what exactly changed between ESR 91 and 102 that might explain this ? There has been no system change, If I reinstall 91 instead it works again as usual.

No issues anywhere else on the endpoints (Edge, Windows), this is on Windows 10 if it makes any difference.

Tanks for any help on this.

Asked by OdeonFF 2 months ago

Last reply by bruno.frisan 8 hours ago

Firefox ESR 91.12

Hello, Qualys is detecting Vulnerabilites on our Firefox ESR 91.12 Versions which were patched by MFSA2022-29. It is showing Vulnerabilities because MFSA2022-30 lists CVE… (read more)

Hello, Qualys is detecting Vulnerabilites on our Firefox ESR 91.12 Versions which were patched by MFSA2022-29.

It is showing Vulnerabilities because MFSA2022-30 lists CVE's for ESR 102.X and we are on 91.12.

Is there anywhere I can go to get a list of all Vulnerabilities on 91.X to show our Security team, I believe CVE-2022-36314 and CVE-2022-2505 are not present in 91.12 because they are not listed in https://www.mozilla.org/en-US/security/advisories/mfsa2022-29/ but need evidence

Thank You,

Asked by mriley1 3 months ago

Last reply by Mike Kaply 3 months ago

  • Archived

Firefox update in the enterprise

Multiple banks are removing Firefox due to vulnerabilities. They have found as I have told them multiple times that there is no centralized method to ensuring firefox rem… (read more)

Multiple banks are removing Firefox due to vulnerabilities. They have found as I have told them multiple times that there is no centralized method to ensuring firefox remains up to date. The admx files from github do set the appautoupdate and backgroundappupdate to a value of 1 to indicate updates but all PCs are at different levels from 90.0 to 95.0 and I've found that even with the auto update switch on that many pcs do not auto update due to users leaving firefox up and ignoring the restart. The autoupdate task runs only if the user is logged on and that allows users to browse with an insecure version of Firefox that can lead to data breaches. CVEs lead to threats to exploit the CVE and that leads to risk that leads to data breaches. These CVEs are tracked by the NVD and this puts security in the hands of users instead of the business and the business has decided to remove firefox from their environments due to this fact.

I know mozilla is NFP but to maintain firefox in an enterprise environment, it need a better update process such as Google Chrome and Edge Chromium.

CVE-2021-38503 CVE-2021-38504 CVE-2021-38505 CVE-2021-38506 CVE-2021-38507 CVE-2021-38508 CVE-2021-38509 CVE-2021-38510

The above are current CVEs of High risk in one environment that has decided firefox will no longer be used.

Asked by bruce92 11 months ago

Last reply by Mike Kaply 9 months ago

  • Archived

group policy

My purpose is deploy specific Certification Authority, which is available in network share, to Firefox by Active Directory group policy (Windows 2012 R2) or alternately t… (read more)

My purpose is deploy specific Certification Authority, which is available in network share, to Firefox by Active Directory group policy (Windows 2012 R2) or alternately to set 'security. enterprise_roots' to 'enabled' so that Firefox can use Windows Certificate Store. Clients are using Firefox on Windows XP, 7, 10 and consequentially different Firefox version. Can I apply my task ? Suggestions ?

Asked by riccardo.castellani 1 year ago

Last reply by Mike Kaply 1 year ago

  • Solved
  • Archived

Migrating normal Firefox profiles to Firefox ESR ones

We have around 1000 Firefox installations on our government organization, all installed via the Firefox MSI installer. Unfortunately, we came late to realize that the Fir… (read more)

We have around 1000 Firefox installations on our government organization, all installed via the Firefox MSI installer. Unfortunately, we came late to realize that the Firefox ESR would be a much more suitable product, compared to the normal Firefox branch.

Now, some years ago we would simply mass uninstall the normal Firefox and mass install the (latest) ESR version and all would be well. Problem is that we have to keep existing profiles (including passwords/bookmarks etc), something that is not supported in the latest Firefox builds.

Can anyone offer some advice/"hacks" to accomplish this? Note that whatever we'll do, we'll have to do it automatically, we lack the man-power to do this manually on a system by system basis...

Thanks in advance for any information provided.

Asked by Michail Pappas 1 year ago

Answered by Mike Kaply 1 year ago

  • Archived

distributing a customized Firefox in small enterprise

Hello everyone, I got around 50 windows clients to deal with and I wonder how to create a customized version to distribute via Kaspersky Security Center. What I intend i… (read more)

Hello everyone,

I got around 50 windows clients to deal with and I wonder how to create a customized version to distribute via Kaspersky Security Center.

What I intend is to create an .msi, a folder or something to install. It should include some extensions like ublock or https-everywhere and such. I also like to have a customized theme included.

There are some ressources like AutoConfig or GPO GPO or repackaging installer. But I don't know if the procedures still work since the documents are three years old and, to be honest, I didn't manage to get anything work that way.

Isn't there a simple way to roll out Firefox in a company with some customization?

Thanks.

Asked by MagisterNavis 1 year ago

Last reply by Mike Kaply 1 year ago

  • Solved
  • Archived

Kiosk Usage

I am currently creating new Images for our touch kiosks and would like to use Firefox. Sadly I am confronted with some problems / strange behaviour. I want to set up a wi… (read more)

I am currently creating new Images for our touch kiosks and would like to use Firefox.

Sadly I am confronted with some problems / strange behaviour.

I want to set up a windows Kiosk with Firefox as shell application. So far this worked but the Firefox window opens around 5 times at every restart, also it does not open again if it is closed. The reopening is a feature of the eshell which reacts to the exit code of the Application. Is there anything you know what causes these behaviours? Google chrome does nothing of these things and simply gets restarted if it is closed, as it should.

The second thing is, the built in Kiosk mode is great but our Application at least needs tabs. Is it possible without too much of a hassle to create such a locked down experience? I'd like to do it with a policy or settings file and not to create my own browser out of firefox, maybe there's a way I have overseeen.

I'd really like to do it with firefox as I personally always had a great experience and I trust the team behind it. Thank you for your support beforehand!

Asked by Ale 1 year ago

Answered by Mike Kaply 1 year ago

  • Archived

Disable "Use recommended performance settings" through policies.json

Dear Madam or Sir, there seem to be new performance settings to be available since Firefox 91: https://support.mozilla.org/en-US/kb/performance-settings While I have been… (read more)

Dear Madam or Sir,

there seem to be new performance settings to be available since Firefox 91: https://support.mozilla.org/en-US/kb/performance-settings

While I have been able to "Use hardware acceleration when available" by using ...

{

 "policies": {
   "HardwareAcceleration": false
 }

}


... I could not find any setting to disable "Use recommended performance settings". Is there any possible way to disable this feature in dsitribution/policies.json ?

Thank you very much in advance!

Best regards

Victor

Asked by mail1155 1 year ago

Last reply by cor-el 1 year ago

  • Archived

Uninstalling Firefox silently and remotely for all users

Since Firefox allows users to install to individual profiles, how do admins go about uninstalling it for all users silently and remotely? If all 1000 PCs have 50 users, a… (read more)

Since Firefox allows users to install to individual profiles, how do admins go about uninstalling it for all users silently and remotely? If all 1000 PCs have 50 users, all with Firefox installed to individual profiles, I can't imagine IT admins would have to find the appdata for each and every user and modify a script for each machine and every user. There must be a simpler way, right? An "Uninstall All" for Firefox?

Asked by lakamine74 1 year ago

Last reply by Mike Kaply 1 year ago

  • Archived

New Browser Update forcing profile creation and losing all data

Good Morning, In my organization some years ago I pushed to have Firefox as our default browser and finally was accepted. It has been very good as we have over 10K employ… (read more)

Good Morning,

In my organization some years ago I pushed to have Firefox as our default browser and finally was accepted. It has been very good as we have over 10K employees using it. However this last week there has been a new release that forces you to create a new profile, one that is achieved all of you original settings and data are gone. We are a health care organization and cannot have this. I sent the fix (about:profiles) to our triage support department. However once the old profile is chosen and made the default. It will revert back to the new one each time you restart or the next day. I need a permanent fix, is there a way to update the old profile to the new version of Firefox? Shouldnt it stay the default once you make it so? I am getting inundated with calls over this, please send the fix asap.

Asked by macros48 1 year ago

Last reply by Mike Kaply 1 year ago

  • Archived

Update Firefox in secure environment

I would like to get new security updates for Firefox, i dont have Internet connection so the updates must come in some other way. is it possible to download updates somew… (read more)

I would like to get new security updates for Firefox, i dont have Internet connection so the updates must come in some other way.

is it possible to download updates somewhere and then place then on a share on a fileserver and then i can tell Firefox look for updates on this share instead of Internet.

I already use this technic for Windows Defender, i download the definition files and the enable a GPO that tell Defender that all updates are on a fileshare.

Can this be done in Firefox (or something similar?

Hope you understand what i am trying to achieve

Asked by piaggio_97 1 year ago

Last reply by Mike Kaply 1 year ago

  • Solved
  • Archived

FF 78.6.0 ESR SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED

hey all, I get the following error ONLY for internal websites (we have our own Windows CA): SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED Yes, I could "ignore" the error, h… (read more)

hey all,

I get the following error ONLY for internal websites (we have our own Windows CA): SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED Yes, I could "ignore" the error, however this is not desired. I compared already the algorithm with some external certs (like Let's Encrypt). Same algorithm, no error....

Have already tried with several internal websites, but without success. Some information about the certificate: Algorithm: RSA 2048 key length Sign. Algorithm: SHA-256 with RSA Encryption V3

What is wrong? I have already tried a lot of things without success. Unfortunately, I no longer know what to do.We deploy the certificates (root+intermediate) via GPO (this works so far). We have the above mentioned problems only after switching from 68ESR to 78ESR.

Thanks in advance.

Asked by mostRecentlyA 1 year ago

Answered by mostRecentlyA 1 year ago