What error is Firefox displaying when users attempt to connect to https
sites?
Also, you might try adding a pref called
"security.enterprise_roots.enabled" and setting it to true (available in
a minimal capacity in 49, but it works much better in 52).

On 11/02/2016 01:12 PM, Pray, Roger wrote:
> We’ve had FireFox deployed in our Enterprise for quite a number of years
> now, however recently our security team has deployed some new feature
> functionality to confirm that all SSL packets don’t contain certain
> types of information, they are effectively doing a man in the middle
> attack on all outgoing and incoming SSL packets.
> 
>  
> 
> This has resulted in almost every HTTPS site – such as google – throwing
> invalid certificate errors.
> 
>  
> 
> I’ve tried to import our domain certificate into FireFox using CCK2 –
> and it appears to be in there as when I’ve manually done an import I get
> an error that it is already present.  But we still continue to get error
> messages when visiting these sites.
> 
>  
> 
> I am resisting pressure from my management team to do a mass uninstall
> of FireFox and just switch to Chrome, but with each failure to implement
> a work around, it gets harder and harder to do so.
> 
>  
> 
> Does anyone know of a solution that I can implement that will work with
> pre-existing profiles for 3000+ PCs.
> 
>  
> 
> Thanks.
> 
>  
> 
>  
> 
> 
> Please consider the environment before printing this e-mail.
> 
> 
> NOTICE OF CONFIDENTIALITY This electronic message, including
> attachments, is for the sole use of the named recipient and may contain
> confidential or privileged information protected by New York State, and
> Federal regulations. Any unauthorized review, use, disclosure, copying
> or distribution is strictly prohibited. If you are not the intended
> recipient or have received this communication in error please contact
> the sender or [email protected] and destroy all copies of the
> original message. Thank you.   ­­  
> 
> 
> _______________________________________________
> Enterprise mailing list
> [email protected]
> https://mail.mozilla.org/listinfo/enterprise
> 
> To unsubscribe from this list, please visit 
> https://mail.mozilla.org/listinfo/enterprise or send an email to 
> [email protected] with a subject of "unsubscribe"
> 

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
[email protected] with a subject of "unsubscribe"

Reply via email to