Page 1 of 1

Enterprise deployment with dual whitelist configuration?

Posted: Mon Feb 21, 2011 3:42 pm
by KahFau
Hello,

I don't know whether my post is a configuration or feature request so I put it in the support forum. Feel free to move it if I was wrong...

We have the plan to deploy Firefox in our corporate environment (about 10,000 clients) with embedded NoScript. The normal user should not be able to remove the addon, so I configured it as a global extension (put it to %ProgramFiles%\Mozilla Firefox\NoScript and added an entry into the registry key HKLM\Software\Mozilla\Firefox\Extensions). The installation works great: every user can disable NoScript within his profile if he do not want to use it, but removal of the extension is not possible.

Now for the tricky part -- the dual whitelist configuration. Our main goal is to maintain one whitelist which is unique on every client. This list is upated once in a month. On the other hand the user should have the ability to add additional sites to a second list only valid within his userprofile. I tried to save the "global" list within the byte-shifted file "mozilla.cfg" but this removed the possibility even of temporary allowed sites.

Any chance to implement this feature into the extension?

Regards,
KahFau

Re: Enterprise deployment with dual whitelist configuration?

Posted: Wed May 30, 2012 12:30 pm
by Thrawn
Bump due to potential uptake.

Re: Enterprise deployment with dual whitelist configuration?

Posted: Thu May 31, 2012 7:36 am
by Tom T.
Thrawn wrote:Bump due to potential uptake.
From more than 15 months ago, on Fx 4.0b, and a waay older NS?
Guess it's OK, but it seems that OP would have asked again at some point if still interested.
Or another corp user with the same question.

(I too sometimes look for stuff that falls through the cracks, but usually only a month or two, unless globally useful.)

btw, if I were a sysadmin and decided NS was to be used, I'd not allow individual users to disable it; I'd train them how to use it.
I'd *certainly* not give them whitelist privileges of their own. Sure way to get the corp LAN infected, and besides, why are they browsing to non-corporate-business-related sites on company time? IMHO. YMMV.