On Sun, Nov 15, 2009 at 1:29 PM, Michael D Faulkner
<[email protected]> wrote:
> Has anyone installed these in AD?

  We use the FrontMotion MSI packages to deploy the Firefox install
via Group Policy.

> The GPO’s seem very limited.

  Never really used them.  What are you looking to do?

> Firefox, from what I’ve read, is much more vulnerability
> prone than IE.

  I've never really seen a fair analysis.  I've seen lots of FUD from
both sides.

  One thing I've seen often is a comparison counts of advisories or
updates, which is bogus.  Microsoft releases updates once a month
unless their stock price is at stake; Firefox releases updates as soon
as the vulnerability is fixed.  Microsoft releases one advisory per
update; Firefox releases an advisory for each vulnerability.

  Microsoft does not consider the design of ActiveX to be a security
vulnerability, and thus doesn't "fix" it; I and many others do.

  I do see regular security updates for both MSIE and Firefox, so
between the two, you have to stay on top of updates either way.

> Isn’t it a pain to have to reinstall a new MSI every time these vendors
> come out with a new one?

  It's not a pain for us.  We just drop the new one into Active
Directory.  It gets installed automatically at next boot.  I wish
everything was so easy.

>  Does Firefox sit there with vulnerabilities in the meantime while
> they are updating their install?

  This can be an issue.  FrontMotion, in particular, has occasionally
lagged behind by a week or so.  If it bothers you enough, you can
build your own MSI from Firefox sources.

> Perhaps this should be submitted to the AD forum as well.

  This isn't really an AD issue; it's more of a Firefox issue.  You
might try the Firefox web forums; there might be more info there.  Or
at least, more people who have done what you're trying to do.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to