Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring Firefox with Active Directory Group Policy
Getting Started Guide | Cloud Web Protection Solutions
Warning 
The following URL contains information and extensions for Firefox and Group Policy Objects (GPO):
http://sourceforge.net/projects/firefoxadm
We strongly recommend that you read all available documentation before installing the Active Directory extensions for Firefox. The above link provides a download of the FirefoxADM, which is a group of Active Directory Group Policy templates. Once you have downloaded the templates, you can install them all. The 2 files that are needed to configure Firefox for Forcepoint Web Security Cloud, however, are:
*
firefoxlock.adm, which is the administrative template for locking down Firefox settings. See Turning on Group Policy to configure a web proxy, page 13.
*
firefox_startup.vbs, which is the startup script for locking down Firefox settings. See Applying the policy, page 14.
Add these 2 files to AD. They are in the main FirefoxADM folder. You should save and extract these files to an easily accessible folder on the machine that you use to edit/create the GPO.
Turning on Group Policy to configure a web proxy
1.
2.
Go to Start > Administrative Tools > Active Directory Users and Computers and expand your domain.
3.
4.
5.
Select the newly created GPO and click Edit. Right click Administrative Templates from the Computer Configuration options.
6.
Choose Add/Remove Templates. Click Add and browse to the folder where you extracted the firefoxlock.adm file.
7.
Click the firefoxlock.adm file and select Open.
This installs the firefoxlock.adm template in AD.
8.
Click Close in the Add/Remove Templates dialog box, then refresh your view. Under Computer Configuration > Administrative Templates, you should see a new section called Mozilla Firefox Locked Settings.
9.
Double click Mozilla Firefox Locked Settings and double-click Proxy Settings.
10.
The Automatic Proxy Configuration URL should point at the PAC file you have chosen to use (see The Forcepoint Web Security Cloud PAC file, page 10, for more details).
Applying the policy
Note 
1.
In the Forcepoint Web Security Cloud GPO, navigate to User Configuration > Windows Settings > Scripts (logon/logoff) and double-click Logon to open the Logon Properties dialog box.
2.
Click Show Files to open the location of any logon scripts for this GPO. This is empty, because this is a new GPO. Leave this window open and navigate to the folder where you extracted the firefox_startup.vbs file (this should be the same folder as the firefoxlock.adm file).
3.
Copy firefox_startup.vbs to the empty scripts folder you have previously opened. Close both file locations.
4.
In the Logon Properties dialog box, select Add to open the Add a Script option.
5.
Click Browse and you are shown the file you have just placed in the scripts folder.
6.
Select the firefox_startup.vbs script and click Open, then click OK twice to apply this script to the GPO.
The next time users log onto a machine, this logon script directs their Firefox browsers to pick up the Firefox defaults set up in the earlier sections.
Turning off the web proxy using Group Policy
1.
Open Active Directory Users and Computers.
2.
3.
4.
Navigate to User Configuration > Administrative Templates > Mozilla Firefox Default Settings and double-click Proxy Settings.
5.
In the Proxy Settings dialog box, select Not Configured then click OK.
This change becomes active next time the client logs on.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Copyright 2017 Forcepoint. All rights reserved.