logoalt Hacker News

nijave • yesterday at 7:55 PM • 2 replies • view on HN

I thought you could push a non user writable config that could control pretty much everything since... Forever?

Along with that, push extensions to add DLP bits, etc


Replies

m-p-3 • yesterday at 10:56 PM

There is, but the configuration and deployment methods are platform-specific, so you'd need to maintain one set of GPOs, another set of .mobileconfig, etc

Then if you need to change something, you need to change those individally per platform.

With this you can set it up and centrally manage them from a single dashboard, the only thing you need to do is to do the platform-specific enrollment once.

I'm glad Mozilla is trying to find a way to monetize the platform in exchange of providing a tool to better manage the browser at the enterprise level.

gcp • yesterday at 9:26 PM

Yes, Firefox was already configurable through enterprise policies that an admin could deploy.

Firefox Enterprise tries to remove as much friction there as possible, and adds a pile of features like deployment monitoring, policy changes while running, device posture checks, various security features like SIEM logging, etc.

The other part is that you get the option to run all supporting services entirely on premise, so the browser never has to "phone home" to us, but you still have working updates, sync support, and so on.