Firefox Hardened 78.2.0 ESR Deployment Tips

Firefox Hardened 78.2.0 ESR Deployment Tips.#SRW-KB17

Written by Giuseppe

Last published at: February 28th, 2024

A new lockdown Firefox 78.2.0 ESR package is now available in the portal. 

By default everything is disabled: Preferences, automatic update,  camera access, microphone, flush, history and more are disabled, and only two links are allowed: google.com and bing.com. Please review the Deployment Notes.txt for more info.

The installation shortcut is as follow :  Command Line: %ProgramW6432%\FirefoxHardened\core\firefox.exe

Before deploying the package have a  look at the content and the file that the package is made off.

You don't need to modify the core.zip, neither the reg key or the install.vbs. 

If you want to allow more websites or change the permissions the only files you need to modify are policies.json and firefox.cfg

NOTES

CHANGING ON THE PROFILE.CFG AND POLICIES.JSON HAVE TO BE DONE BEFORE DEPLOYING THE PACKAGE INTO THE CONSOLE

To allow camera and microphone for example simply comment these two lines from the firefox.cfg file


and set these lines from the policies.json to false


By default, all URLs are blocked in the policies.json. To add exclusions please add them in the exception. Wildcards are also accepted


 

For more info please have a look at the Mozilla website


Example of Firefor hardened with no URL exceptions.

Once done, please zip all the files and add the package to the Management Console and then deploy it.