KB Article | Forcepoint Support

Problem Description

Forcepoint DLP Endpoint (formerly known as TRITON AP-ENDPOINT DLP) supports the versions of Firefox listed in the Certified Product Matrix. Unsupported versions of the browser can cause compatibility issues.

When Mozilla releases new versions of Firefox, they have auto-update enabled by default, so unsupported browsers may be installed on endpoint machines.

If this happens, Forcepoint DLP (formerly known as TRITON AP-DATA) can monitor or enforce application controls such as file access, copy/cut/paste, and screen capture operations done on the browser, and in most cases, continue inspecting outbound content on the HTTP or HTTPS channel; however, other compatibility issues, such as decreased performance, can arise.

(To enable application controls, select Endpoint Application as one of your rule's destinations, and then configure Application Control in your action plan.)

 

Resolution

To prevent possible compatibility issues, deploy only supported versions of Firefox and disable its auto-update feature. Instead, use the enterprise tools provided by Mozilla to proactively manage browser updates. This reduces the risk of an unsupported version being installed.

In addition, if your organization updates browsers frequently, be sure to keep your Forcepoint DLP Endpoint software current. Forcepoint continually tests browsers as they are released and updates the Forcepoint DLP Endpoint software.

When a new browser version is released, the Certified Product Matrix is updated within one working week to clarify the support status for the new browser version. New browser versions are either supported in a specified Forcepoint DLP Endpoint build or marked as "PR" for a planned future release. When a browser version if marked "PR," Forcepoint aims to support the new version in the next scheduled Forcepoint DLP Endpoint release.

If a critical compatibility issue is identified during new browser testing, a Tech Alert is emailed to customers who subscribed to the Forcepoint DLP, Forcepoint DLP Endpoint, and Forcepoint One Endpoint email lists. Forcepoint immediately works to resolve any critical compatibility issues.

All Forcepoint DLP Endpoint updates are automatically integrated into the next scheduled release. Interim builds for specific browser versions are available on demand from Forcepoint Technical Support.

To turn off Firefox auto-update at the enterprise level, refer to the instructions provided here: https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections. You do not need administrative rights to configure Firefox auto-update.

For information about how to use supported versions of Firefox that don't automatically update when a new release is available, see the Firefox Extended Support release at https://www.mozilla.org/en-US/firefox/organizations/. This release is intended for groups who deploy and maintain a desktop environment in large organizations, such as universities and other schools, county or city governments, and businesses.

For information on the release schedule for Firefox, see https://wiki.mozilla.org/Releases.

For additional information on release requirements, see the Forcepoint One Endpoint Installation Guide.

Article Feedback



Thank you for the feedback and comments.