FFOX-00-000004 - Firefox must be configured to not automatically check for updated versions of installed search plugins.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Updates must be controlled and installed from authorized and trusted servers. This setting overrides a number of other settings that may direct the application to access external URLs.

Solution

Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesMozillaFirefox
Policy Name: Preferences
Policy State: Enabled
Policy Value:
{
"browser.search.update": {
"Value": false,
"Status": "locked"
}
}

macOS "plist" file:
Add the following:
<key>Preferences</key>
<dict>
<key>browser.search.update</key>
<dict>
<key>Value</key>
<false/>
<key>Status</key>
<string>locked</string>
</dict>
</dict>

Linux "policies.json" file:
Add the following in the policies section:
"Preferences": {
"browser.search.update": {
"Value": false,
"Status": "locked"
}
}

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MOZ_Firefox_V6R4_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000381, Rule-ID|SV-251548r807116_rule, STIG-ID|FFOX-00-000004, Vuln-ID|V-251548

Plugin: Windows

Control ID: 70481c920637194afd3a4d7e4a49344ede721d6eb288f65783c39c4ac5ab5461