USNS MONTFORD POINT - Findings

V-251545 CAT I The installed version of Firefox must be supported.

4 assets 3 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) was unable to determine a Status but found the below configuration on 12/17/2025: ResultHash: 0FCC0348AFE2E97D141B22373B94B72CEE381353 ~~~~~ Apps and Features entries for Firefox: Name: Mozilla Firefox ESR (x64 en-US) Version: 140.6.0 Path: C:\Program Files\Mozilla Firefox Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) was unable to determine a Status but found the below configuration on 12/17/2025: ResultHash: 0FCC0348AFE2E97D141B22373B94B72CEE381353 ~~~~~ Apps and Features entries for Firefox: Name: Mozilla Firefox ESR (x64 en-US) Version: 140.6.0 Path: C:\Program Files\Mozilla Firefox Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: CDA64C53C50F058D63F08C3F6AD2DAD12183D817 ~~~~~ Apps and Features entries for Firefox: Name: Mozilla Firefox ESR (x64 en-US) Version: 140.4.0 Path: C:\Program Files\Mozilla Firefox Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: CDA64C53C50F058D63F08C3F6AD2DAD12183D817 ~~~~~ Apps and Features entries for Firefox: Name: Mozilla Firefox ESR (x64 en-US) Version: 140.4.0 Path: C:\Program Files\Mozilla Firefox Comments

Check Text

Run Firefox. Click the ellipsis button >> Help >> About Firefox, and view the version number. If the Firefox version is not a supported version, this is a finding.

Fix Text

Upgrade the version of the browser to an approved version by obtaining software from the vendor or other trusted source.

V-251546 CAT I Firefox must be configured to allow only TLS 1.2 or above.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4A1B334B1277709B8C673DCF44E7FB095B1934FF ~~~~~ 'Minimum SSL version enabled' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SSLVersionMin Value: tls1.2 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4A1B334B1277709B8C673DCF44E7FB095B1934FF ~~~~~ 'Minimum SSL version enabled' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SSLVersionMin Value: tls1.2 Type: REG_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A1B334B1277709B8C673DCF44E7FB095B1934FF ~~~~~ 'Minimum SSL version enabled' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SSLVersionMin Value: tls1.2 Type: REG_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A1B334B1277709B8C673DCF44E7FB095B1934FF ~~~~~ 'Minimum SSL version enabled' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SSLVersionMin Value: tls1.2 Type: REG_SZ Comments

Check Text

Type "about:policies" in the browser window. If "SSLVersionMin" is not displayed under Policy Name or the Policy Value is not "tls1.2" or "tls1.3", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Minimum SSL version enabled Policy State: Enabled Policy Value: TLS 1.2 (or TLS 1.3) macOS "plist" file: Add the following: <key>SSLVersionMin</key> <string>tls1.2</string> (or <string>tls1.3</string>) Linux "policies.json" file: Add the following in the policies section: "SSLVersionMin": "tls1.2" or ("SSLVersionMin": "tls1.3")

V-251553 CAT II Firefox must be configured to block pop-up windows.

4 assets 2 Open 2 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 79D13E0D5E08D476288AC1ACC76FD0D293699304 ~~~~~ 'Block pop-ups from websites' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Default Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow preferences to be changed' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 79D13E0D5E08D476288AC1ACC76FD0D293699304 ~~~~~ 'Block pop-ups from websites' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Default Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow preferences to be changed' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025 ResultHash: D7E7F097AAE9B8E85E5D5E6C0ED9A8811FB0F349 ~~~~~ 'Block pop-ups from websites' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Default Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow preferences to be changed' is NOT Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Locked (Not found) ----------------------------------------------------------------------- Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025 ResultHash: D7E7F097AAE9B8E85E5D5E6C0ED9A8811FB0F349 ~~~~~ 'Block pop-ups from websites' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Default Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow preferences to be changed' is NOT Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking Name: Locked (Not found) ----------------------------------------------------------------------- Comments

Check Text

Type "about:policies" in the browser address bar. If "PopupBlocking" is not displayed under Policy Name or the Policy Value is not "Default" "true", this is a finding. If "PopupBlocking" is not displayed under Policy Name or the Policy Value is not "Locked" "true", this is a finding. "PopupBlocking" "Enabled" may be used to specify an allowlist of sites where pop-ups are desired, this is optional.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Popups Policy Name: Block pop-ups from websites Policy State: Enabled Policy Name: Do not allow preferences to be changed Policy State: Enabled Optional: Policy Name: Allowed Sites Policy State: Enabled Click "Show..." and enter a list of websites to be allowlisted. macOS "plist" file: Add the following: <key>PopupBlocking</key> <dict> <key>Allow</key> <array> <string>http://example.mil</string> <string>http://example.gov</string> </array> <key>Default</key> <true/> <key>Locked</key> <true/> </dict> Linux "policies.json" file: Add the following in the policies section: "PopupBlocking": { "Allow": ["http://example.mil/", "http://example.gov/"], "Default": true, "Locked": true}

V-252908 CAT II Pocket must be disabled.

4 assets 2 Open 2 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F92C828111B93EA07EED72C522A9D809585DAF36 ~~~~~ 'Disable Pocket' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePocket Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F92C828111B93EA07EED72C522A9D809585DAF36 ~~~~~ 'Disable Pocket' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePocket Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025 ResultHash: 8A867327746B7399E6826DEF306A3880003E8980 ~~~~~ 'Disable Pocket' is NOT Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePocket (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025 ResultHash: 8A867327746B7399E6826DEF306A3880003E8980 ~~~~~ 'Disable Pocket' is NOT Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePocket (Not found) Comments

Check Text

Type "about:policies" in the browser address bar. If "DisablePocket" is not displayed under Policy Name or the Policy Value does not have a value of "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Pocket Policy State: Enabled macOS "plist" file: <key>DisablePocket</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisablePocket": true

V-252909 CAT II Firefox Studies must be disabled.

4 assets 2 Open 2 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 89EDCDAB2564CEF1ED1922A37C45AC3CF92771F2 ~~~~~ 'Disable Firefox Studies' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxStudies Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 89EDCDAB2564CEF1ED1922A37C45AC3CF92771F2 ~~~~~ 'Disable Firefox Studies' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxStudies Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025 ResultHash: 0F84BAE3896E8F989A72D47B4804030157ACD493 ~~~~~ 'Disable Firefox Studies' is NOT Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxStudies (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025 ResultHash: 0F84BAE3896E8F989A72D47B4804030157ACD493 ~~~~~ 'Disable Firefox Studies' is NOT Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxStudies (Not found) Comments

Check Text

Type "about:policies" in the browser address bar. If "DisableFirefoxStudies" is not displayed under Policy Name or the Policy Value does not have a value of "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Firefox Studies Policy State: Enabled macOS "plist" file: <key>DisableFirefoxStudies</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisableFirefoxStudies": true

V-251547 CAT II Firefox must be configured to ask which certificate to prese...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 91E48F7518473AE7664AF990CFB3CC78C5C05C36 ~~~~~ 'Preferences' is Enabled: security.default_personal_cert Value: Ask Every Time Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 91E48F7518473AE7664AF990CFB3CC78C5C05C36 ~~~~~ 'Preferences' is Enabled: security.default_personal_cert Value: Ask Every Time Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments

Check Text

Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name and the Policy Value does not include "security.default_personal_cert" with a value of "Ask Every Time" and status of "locked", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>security.default_personal_cert</key> <dict> <key>Value</key> <string>Ask Every Time</string> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" } }

V-251548 CAT II Firefox must be configured to not automatically check for up...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06810F281F578C0914F4654F9C6124808F7ACCD2 ~~~~~ 'Preferences' is Enabled: browser.search.update Value: False Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06810F281F578C0914F4654F9C6124808F7ACCD2 ~~~~~ 'Preferences' is Enabled: browser.search.update Value: False Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments

Check Text

Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "browser.search.update" with a value of "false" and status of "locked", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "browser.search.update": { "Value": false, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>browser.search.update</key> <dict> <key>Value</key> <false/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "browser.search.update": { "Value": false, "Status": "locked" } }

V-251549 CAT II Firefox must be configured to not automatically update insta...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F793F59E04C568231872AC49A83EE930422DFE9D ~~~~~ 'Extension Update' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: ExtensionUpdate Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F793F59E04C568231872AC49A83EE930422DFE9D ~~~~~ 'Extension Update' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: ExtensionUpdate Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F793F59E04C568231872AC49A83EE930422DFE9D ~~~~~ 'Extension Update' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: ExtensionUpdate Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F793F59E04C568231872AC49A83EE930422DFE9D ~~~~~ 'Extension Update' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: ExtensionUpdate Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "ExtensionUpdate" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Extensions Policy Name: Extension Update Policy State: Disabled macOS "plist" file: Add the following: <key>ExtensionUpdate</key> <false/> Linux "policies.json" file: Add the following in the policies section: "ExtensionUpdate": false

V-251550 CAT II Firefox must be configured to not automatically execute or d...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 51FD6061F9FF59F75E48142A30E35B649C2E6863 ~~~~~ Evaluate-STIG intended to utilize MONT-SW-89108\Scan.Admin, but the user has NOT utilized Firefox on this system. User Profile Evaluated: MONT-SW-89108\dod_admin None of the extensions in question are configured. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: FDD7EC120C3A7E53B1B2F0B1FE803C005523274E ~~~~~ None of the extensions in question are configured. Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: FDD7EC120C3A7E53B1B2F0B1FE803C005523274E ~~~~~ None of the extensions in question are configured. Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: FDD7EC120C3A7E53B1B2F0B1FE803C005523274E ~~~~~ None of the extensions in question are configured. Comments

Check Text

Type "about:preferences" in the browser address bar. Type "Applications" in the Find bar in the upper-right corner. Determine if any of the following file extensions are listed: HTA, JSE, JS, MOCHA, SHS, VBE, VBS, SCT, WSC, FDF, XFDF, LSL, LSO, LSS, IQY, RQY, DOS, BAT, PS, EPS, WCH, WCM, WB1, WB3, WCH, WCM, AD. If the entry exists and the "Action" is "Save File" or "Always Ask", this is not a finding. If an extension exists and the entry in the Action column is associated with an application that does/can execute the code, this is a finding.

Fix Text

Remove any unauthorized extensions from the auto-download list.

V-251551 CAT II Firefox must be configured to disable form fill assistance.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9179F895F1390903A0B414F114CDB25AC3EE064D ~~~~~ 'Disable Form History' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFormHistory Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9179F895F1390903A0B414F114CDB25AC3EE064D ~~~~~ 'Disable Form History' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFormHistory Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9179F895F1390903A0B414F114CDB25AC3EE064D ~~~~~ 'Disable Form History' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFormHistory Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9179F895F1390903A0B414F114CDB25AC3EE064D ~~~~~ 'Disable Form History' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFormHistory Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "DisableFormHistory" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Form History Policy State: Enabled macOS "plist" file: Add the following: <key>DisableFormHistory</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisableFormHistory": true

V-251552 CAT II Firefox must be configured to not use a password store with ...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F9A42EA4C5CB40341BAB7120CDF0CA084C1B947E ~~~~~ 'Password Manager' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F9A42EA4C5CB40341BAB7120CDF0CA084C1B947E ~~~~~ 'Password Manager' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F9A42EA4C5CB40341BAB7120CDF0CA084C1B947E ~~~~~ 'Password Manager' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F9A42EA4C5CB40341BAB7120CDF0CA084C1B947E ~~~~~ 'Password Manager' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "PasswordManagerEnabled" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: PasswordManager Policy State: Disabled macOS "plist" file: Add the following: <key>PasswordManagerEnabled</key> <false/> Linux "policies.json" file: Add the following in the policies section: "PasswordManagerEnabled": false

V-251554 CAT II Firefox must be configured to prevent JavaScript from moving...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89EC26540C357A3AA17CB6ACC509E10D4B721BD0 ~~~~~ 'Preferences' is Enabled: dom.disable_window_move_resize Value: True Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89EC26540C357A3AA17CB6ACC509E10D4B721BD0 ~~~~~ 'Preferences' is Enabled: dom.disable_window_move_resize Value: True Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments

Check Text

Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_move_resize" with a value of "true" and status of "locked", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_move_resize": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>dom.disable_window_move_resize</key> <dict> <key>Value</key> <true/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_move_resize": { "Value": true, "Status": "locked" } }

V-251555 CAT II Firefox must be configured to prevent JavaScript from raisin...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F867D7F319A1124DB9134388A49E4C3A4649CB0 ~~~~~ 'Preferences' is Enabled: dom.disable_window_flip Value: True Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F867D7F319A1124DB9134388A49E4C3A4649CB0 ~~~~~ 'Preferences' is Enabled: dom.disable_window_flip Value: True Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments

Check Text

Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_flip" with a value of "true" and status of "locked", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>dom.disable_window_flip</key> <dict> <key>Value</key> <true/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_flip": { "Value": true, "Status": "locked" } }

V-251557 CAT II Firefox must be configured to disable the installation of ex...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "InstallAddonsPermission" is not displayed under Policy Name or the Policy Value is not "Default" "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Addons Policy Name: Allow add-on installs from websites Policy State: Disabled macOS "plist" file: Add the following: <key>InstallAddonsPermission</key> <false/> Linux "policies.json" file: Add the following in the policies section: "InstallAddonsPermission": { "Default": false }

V-251558 CAT II Background submission of information to Mozilla must be disa...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 040661501711A5ABA042F5832E27758977494917 ~~~~~ 'Disable Telemetry' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableTelemetry Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 040661501711A5ABA042F5832E27758977494917 ~~~~~ 'Disable Telemetry' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableTelemetry Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 040661501711A5ABA042F5832E27758977494917 ~~~~~ 'Disable Telemetry' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableTelemetry Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 040661501711A5ABA042F5832E27758977494917 ~~~~~ 'Disable Telemetry' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableTelemetry Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "DisableTelemetry" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Telemetry Policy State: Enabled macOS "plist" file: Add the following: <key>DisableTelemetry</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisableTelemetry": true

V-251560 CAT II Firefox must have the DOD root certificates installed.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 49D2D4D25D074713FC26932FF295E85D10CCF36A ~~~~~ 'Import Enterprise Roots' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Certificates Name: ImportEnterpriseRoots Value: 0x00000001 (1) Type: REG_DWORD Subject: CN=NSS Root CA 4, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US Thumbprint: D753369F16C2CF15A9647AAE4F6E2B40E4A28242 NotAfter: 10/11/2041 13:47:15 Subject: CN=NSS Root CA 1, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US Thumbprint: 4D96A58E74C1D5EC06C018459C3DDE71C0DBEF41 NotAfter: 11/28/2029 22:06:38 Subject: CN=NSS Root CA 2, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US Thumbprint: 3CEE89598C90AA6F5A3B75FB03E94E111D75B5D9 NotAfter: 10/20/2030 13:29:50 Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 6B698F8C848148C6B07A5D38E6DD2B7AECD543CC ~~~~~ 'Import Enterprise Roots' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Certificates Name: ImportEnterpriseRoots Value: 0x00000001 (1) Type: REG_DWORD Subject: CN=NSS Root CA 4, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US Thumbprint: D753369F16C2CF15A9647AAE4F6E2B40E4A28242 NotAfter: 10/11/2041 13:47:15 Subject: CN=NSS Root CA 5, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US Thumbprint: 7232A47EB4B80CE23A2A3C3799CCAE0D67B0F143 NotAfter: 09/25/2048 15:12:12 Subject: CN=NSS Root CA 1, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US Thumbprint: 4D96A58E74C1D5EC06C018459C3DDE71C0DBEF41 NotAfter: 11/28/2029 22:06:38 Subject: CN=NSS Root CA 2, OU=Certification Authorities, OU=NSS, O=U.S. Government, C=US Thumbprint: 3CEE89598C90AA6F5A3B75FB03E94E111D75B5D9 NotAfter: 10/20/2030 13:29:50 Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE8572CFA995924E1F43FC99182513BCB56D8FFB ~~~~~ 'Import Enterprise Roots' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Certificates Name: ImportEnterpriseRoots Value: 0x00000001 (1) Type: REG_DWORD Subject: CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US Thumbprint: D73CA91102A2204A36459ED32213B467D7CE97FB NotAfter: 12/30/2029 Installed: True Subject: CN=DoD Root CA 4, OU=PKI, OU=DoD, O=U.S. Government, C=US Thumbprint: B8269F25DBD937ECAFD4C35A9838571723F2D026 NotAfter: 7/25/2032 Installed: True Subject: CN=DoD Root CA 5, OU=PKI, OU=DoD, O=U.S. Government, C=US Thumbprint: 4ECB5CC3095670454DA1CBD410FC921F46B8564B NotAfter: 6/14/2041 Installed: True Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE8572CFA995924E1F43FC99182513BCB56D8FFB ~~~~~ 'Import Enterprise Roots' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Certificates Name: ImportEnterpriseRoots Value: 0x00000001 (1) Type: REG_DWORD Subject: CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US Thumbprint: D73CA91102A2204A36459ED32213B467D7CE97FB NotAfter: 12/30/2029 Installed: True Subject: CN=DoD Root CA 4, OU=PKI, OU=DoD, O=U.S. Government, C=US Thumbprint: B8269F25DBD937ECAFD4C35A9838571723F2D026 NotAfter: 7/25/2032 Installed: True Subject: CN=DoD Root CA 5, OU=PKI, OU=DoD, O=U.S. Government, C=US Thumbprint: 4ECB5CC3095670454DA1CBD410FC921F46B8564B NotAfter: 6/14/2041 Installed: True Comments

Check Text

Type "about:preferences#privacy" in the browser window. Scroll down to the bottom and select "View Certificates...". In the Certificate Manager window, select the "Authorities" tab. Scroll through the Certificate Name list to the U.S. Government heading. Look for the entries for DOD Root CA 3, DOD Root CA 4, and DOD Root CA 5. If there are entries for DOD Root CA 3, DOD Root CA 4, and DOD Root CA 5, select them individually. Click "View". Verify the issuer name is "US Government". If there are no entries for the appropriate DOD root certificates, this is a finding. If other AO-approved certificates are used, this is not a finding. If SIPRNet-specific certificates are used, this is not a finding. Note: In a Windows environment, use of policy setting "security.enterprise_roots.enabled=true" will point Firefox to the Windows Trusted Root Certification Authority Store. This is not a finding. It can also be set via the policy Certificates >> ImportEnterpriseRoots, which can be verified via "about:policies".

Fix Text

Install the DOD root certificates. Other AO-approved certificates may also be used. Certificates designed for SIPRNet may be used as appropriate. On Windows, import certificates from the operating system by using Certificates >> Import Enterprise Roots (Certificates) via policy or Group Policy Object (GPO).

V-251562 CAT II Firefox must prevent the user from quickly deleting data.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 362C8D39CEA54636B54EDE44E85265E0760AD62A ~~~~~ 'Disable Forget Button' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableForgetButton Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 362C8D39CEA54636B54EDE44E85265E0760AD62A ~~~~~ 'Disable Forget Button' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableForgetButton Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 362C8D39CEA54636B54EDE44E85265E0760AD62A ~~~~~ 'Disable Forget Button' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableForgetButton Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 362C8D39CEA54636B54EDE44E85265E0760AD62A ~~~~~ 'Disable Forget Button' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableForgetButton Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Enter "about:policies" in the browser address bar. If "DisableForgetButton" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration >> Administrative Templates >> Mozilla >> Firefox. Policy Name: Disable Forget Button Policy State: Enabled macOS "plist" file: Add the following: <key>DisableForgetButton</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisableForgetButton": true

V-251563 CAT II Firefox private browsing must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1716A2B8F32DBBBA955F230BA2A4829116E25B14 ~~~~~ 'Disable Private Browsing' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePrivateBrowsing Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1716A2B8F32DBBBA955F230BA2A4829116E25B14 ~~~~~ 'Disable Private Browsing' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePrivateBrowsing Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1716A2B8F32DBBBA955F230BA2A4829116E25B14 ~~~~~ 'Disable Private Browsing' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePrivateBrowsing Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1716A2B8F32DBBBA955F230BA2A4829116E25B14 ~~~~~ 'Disable Private Browsing' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisablePrivateBrowsing Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "DisablePrivateBrowsing" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Private Browsing Policy State: Enabled macOS "plist" file: Add the following: <key>DisablePrivateBrowsing</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisablePrivateBrowsing": true

V-251564 CAT II Firefox search suggestions must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 13D30FE8309FAA7BBED4E36BCE909B0DCB8BE86C ~~~~~ 'Search Suggestions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 13D30FE8309FAA7BBED4E36BCE909B0DCB8BE86C ~~~~~ 'Search Suggestions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 13D30FE8309FAA7BBED4E36BCE909B0DCB8BE86C ~~~~~ 'Search Suggestions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 13D30FE8309FAA7BBED4E36BCE909B0DCB8BE86C ~~~~~ 'Search Suggestions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "SearchSuggestEnabled" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Search Policy Name: Search Suggestions Policy State: Disabled macOS "plist" file: Add the following: <key>SearchSuggestEnabled</key> <false/> Linux "policies.json" file: Add the following in the policies section: "SearchSuggestEnabled": false

V-251566 CAT II Firefox network prediction must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D59796A40697A95F2ADCC5402D17E6589778EDDB ~~~~~ 'Network Prediction' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: NetworkPrediction Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D59796A40697A95F2ADCC5402D17E6589778EDDB ~~~~~ 'Network Prediction' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: NetworkPrediction Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D59796A40697A95F2ADCC5402D17E6589778EDDB ~~~~~ 'Network Prediction' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: NetworkPrediction Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D59796A40697A95F2ADCC5402D17E6589778EDDB ~~~~~ 'Network Prediction' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: NetworkPrediction Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "NetworkPrediction" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Network Prediction Policy State: Disabled macOS "plist" file: Add the following: <key>NetworkPrediction</key> <false/> Linux "policies.json" file: Add the following in the policies section: "NetworkPrediction": false

V-251567 CAT II Firefox fingerprinting protection must be enabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 93DB1E534853D5D927863B155FF677CECE479B35 ~~~~~ 'Fingerprinting' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Fingerprinting Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 93DB1E534853D5D927863B155FF677CECE479B35 ~~~~~ 'Fingerprinting' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Fingerprinting Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 93DB1E534853D5D927863B155FF677CECE479B35 ~~~~~ 'Fingerprinting' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Fingerprinting Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 93DB1E534853D5D927863B155FF677CECE479B35 ~~~~~ 'Fingerprinting' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Fingerprinting Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "EnableTrackingProtection" is not displayed under Policy Name or the Policy Value is not "Fingerprinting" with a value of "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Tracking Protection Policy Name: Fingerprinting Policy State: Enabled macOS "plist" file: Add the following: <key>EnableTrackingProtection</key> <dict> <key>Fingerprinting</key> <true/> </dict> Linux "policies.json" file: Add the following in the policies section: "EnableTrackingProtection": { "Fingerprinting": true }

V-251568 CAT II Firefox cryptomining protection must be enabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 225125C6F1FEBB34D2851E8BC02C623024A0126E ~~~~~ 'Cryptomining' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Cryptomining Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 225125C6F1FEBB34D2851E8BC02C623024A0126E ~~~~~ 'Cryptomining' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Cryptomining Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 225125C6F1FEBB34D2851E8BC02C623024A0126E ~~~~~ 'Cryptomining' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Cryptomining Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 225125C6F1FEBB34D2851E8BC02C623024A0126E ~~~~~ 'Cryptomining' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection Name: Cryptomining Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "EnableTrackingProtection" is not displayed under Policy Name or the Policy Value is not "Cryptomining" with a value of "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Tracking Protection Policy Name: Cryptomining Policy State: Enabled macOS "plist" file: Add the following: <key>EnableTrackingProtection</key> <dict> <key>Cryptomining</key> <true/> </dict> Linux "policies.json" file: Add the following in the policies section: "EnableTrackingProtection": { "Cryptomining": true }

V-251569 CAT II Firefox Enhanced Tracking Protection must be enabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E725D06C78C0EF30FA1C1A483545DBA08A2F0662 ~~~~~ 'Preferences' is Enabled: browser.contentblocking.category Value: strict Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E725D06C78C0EF30FA1C1A483545DBA08A2F0662 ~~~~~ 'Preferences' is Enabled: browser.contentblocking.category Value: strict Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments

Check Text

Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "browser.contentblocking.category" with a value of "strict" and status of "locked", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "browser.contentblocking.category": { "Value": "strict", "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>browser.contentblocking.category</key> <dict> <key>Value</key> <string>strict</string> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "browser.contentblocking.category": { "Value": "strict", "Status": "locked" } }

V-251570 CAT II Firefox extension recommendations must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1DCCA6C1D0AE1733EB9810DD029EFF95B0DE50A2 ~~~~~ 'Preferences' is Enabled: extensions.htmlaboutaddons.recommendations.enabled Value: False Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1DCCA6C1D0AE1733EB9810DD029EFF95B0DE50A2 ~~~~~ 'Preferences' is Enabled: extensions.htmlaboutaddons.recommendations.enabled Value: False Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ Comments

Check Text

Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name and the Policy Value does not include "extensions.htmlaboutaddons.recommendations.enabled" with a value of "false" and status of "locked", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>extensions.htmlaboutaddons.recommendations.enabled</key> <dict> <key>Value</key> <false/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" },

V-251571 CAT II Firefox deprecated ciphers must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9BF6140C9B6012DC4D44B55CC5D053D3A4051398 ~~~~~ 'TLS_RSA_WITH_3DES_EDE_CBC_SHA' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DisabledCiphers Name: TLS_RSA_WITH_3DES_EDE_CBC_SHA Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9BF6140C9B6012DC4D44B55CC5D053D3A4051398 ~~~~~ 'TLS_RSA_WITH_3DES_EDE_CBC_SHA' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DisabledCiphers Name: TLS_RSA_WITH_3DES_EDE_CBC_SHA Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9BF6140C9B6012DC4D44B55CC5D053D3A4051398 ~~~~~ 'TLS_RSA_WITH_3DES_EDE_CBC_SHA' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DisabledCiphers Name: TLS_RSA_WITH_3DES_EDE_CBC_SHA Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9BF6140C9B6012DC4D44B55CC5D053D3A4051398 ~~~~~ 'TLS_RSA_WITH_3DES_EDE_CBC_SHA' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DisabledCiphers Name: TLS_RSA_WITH_3DES_EDE_CBC_SHA Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "DisabledCiphers" is not displayed under Policy Name or the Policy Value is not "TLS_RSA_WITH_3DES_EDE_CBC_SHA" with a value of "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Disabled Ciphers Policy Name: TLS_RSA_WITH_3DES_EDE_CBC_SHA Policy State: Enabled macOS "plist" file: Add the following: <key>DisabledCiphers</key> <dict> <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key> <true/> </dict> Linux "policies.json" file: Add the following in the policies section: "DisabledCiphers": { "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true }

V-251572 CAT II Firefox must not recommend extensions as the user is using t...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 76273C4D51602AE797EC8B4A2DF97E184CB1427E ~~~~~ 'Extension Recommendations' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\UserMessaging Name: ExtensionRecommendations Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 76273C4D51602AE797EC8B4A2DF97E184CB1427E ~~~~~ 'Extension Recommendations' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\UserMessaging Name: ExtensionRecommendations Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76273C4D51602AE797EC8B4A2DF97E184CB1427E ~~~~~ 'Extension Recommendations' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\UserMessaging Name: ExtensionRecommendations Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76273C4D51602AE797EC8B4A2DF97E184CB1427E ~~~~~ 'Extension Recommendations' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\UserMessaging Name: ExtensionRecommendations Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "UserMessaging" is not displayed under Policy Name or the Policy Value is not "ExtensionRecommendations" with a value of "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\User Messaging Policy Name: Extension Recommendations Policy State: Disabled macOS "plist" file: Add the following: <key>UserMessaging</key> <dict> <key>ExtensionRecommendations</key> <false/> </dict> Linux "policies.json" file: Add the following in the policies section: "UserMessaging": { "ExtensionRecommendations": false }

V-251573 CAT II The Firefox New Tab page must not show Top Sites, Sponsored ...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C2520890E51B5EE390110B46F587A12434228705 ~~~~~ 'Search' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Search Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: TopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredTopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Recommended by Pocket' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Pocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Pocket Stories' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredPocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Highlights Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Snippets' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Snippets Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow settings to be changed' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C2520890E51B5EE390110B46F587A12434228705 ~~~~~ 'Search' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Search Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: TopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredTopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Recommended by Pocket' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Pocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Pocket Stories' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredPocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Highlights Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Snippets' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Snippets Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow settings to be changed' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C2520890E51B5EE390110B46F587A12434228705 ~~~~~ 'Search' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Search Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: TopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredTopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Recommended by Pocket' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Pocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Pocket Stories' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredPocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Highlights Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Snippets' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Snippets Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow settings to be changed' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C2520890E51B5EE390110B46F587A12434228705 ~~~~~ 'Search' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Search Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: TopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Top Sites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredTopSites Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Recommended by Pocket' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Pocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Sponsored Pocket Stories' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: SponsoredPocket Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Highlights Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Snippets' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Snippets Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Do not allow settings to be changed' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments

Check Text

Type "about:policies" in the browser address bar. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Search" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "TopSites" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "SponsoredTopSites" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Pocket" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "SponsoredPocket" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Highlights" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Snippets" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Locked" with a value of "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Customize Firefox Home Policy State: Enabled Policy Value: Uncheck "Search" Policy Value: Uncheck "Top Sites" Policy Value: Uncheck "Sponsored Top Sites" Policy Value: Uncheck "Recommended by Pocket" Policy Value: Uncheck "Sponsored Pocket Stories" Policy Value: Uncheck "Download History" Policy Value: Uncheck "Snippets" Policy Value: Check "Do not allow settings to be changed" macOS "plist" file: Add the following: <key>FirefoxHome</key> <dict> <key>Search</key> <false/> <key>TopSites</key> <false/> <key>SponsoredTopSites</key> <false/> <key>Pocket</key> <false/> <key>SponsoredPocket</key> <false/> <key>Highlights</key> <false/> <key>Snippets</key> <false/> <key>Locked</key> <true/> </dict> Linux "policies.json" file: Add the following in the policies section: "FirefoxHome": { "Search": false, "TopSites": false, "SponsoredTopSites": false, "Pocket": false, "SponsoredPocket": false, "Highlights": false, "Snippets": false, "locked": true }

V-251577 CAT II Firefox must be configured so that DNS over HTTPS is disable...

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 340547C1C678AC6710D184B1448748B07BCEDF21 ~~~~~ 'Enabled' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DNSOverHTTPS Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 340547C1C678AC6710D184B1448748B07BCEDF21 ~~~~~ 'Enabled' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DNSOverHTTPS Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 340547C1C678AC6710D184B1448748B07BCEDF21 ~~~~~ 'Enabled' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DNSOverHTTPS Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 340547C1C678AC6710D184B1448748B07BCEDF21 ~~~~~ 'Enabled' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DNSOverHTTPS Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "DNSOverHTTPS" is not displayed under Policy Name or the Policy Value does not have "Enabled" with a value of "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\DNS Over HTTPS Policy Name: Enabled Policy State: Disabled macOS "plist" file: <key>DNSOverHTTPS</key> <dict> <key>Enabled</key> <false/> Linux "policies.json" file: Add the following in the policies section: "DNSOverHTTPS": {"Enabled": false}

V-251578 CAT II Firefox accounts must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5BB461DD1BD4963F84A49B3194351D6DFB17D1A0 ~~~~~ 'Disable Firefox Accounts' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxAccounts Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5BB461DD1BD4963F84A49B3194351D6DFB17D1A0 ~~~~~ 'Disable Firefox Accounts' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxAccounts Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5BB461DD1BD4963F84A49B3194351D6DFB17D1A0 ~~~~~ 'Disable Firefox Accounts' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxAccounts Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5BB461DD1BD4963F84A49B3194351D6DFB17D1A0 ~~~~~ 'Disable Firefox Accounts' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFirefoxAccounts Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "DisableFirefoxAccounts" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Disable Firefox Accounts Policy State: Enabled macOS "plist" file: <key>DisableFirefoxAccounts</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisableFirefoxAccounts": true

V-251580 CAT II Firefox feedback reporting must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 215D1DC57D9C41DF4EB1AA3912BE2F3D24563D21 ~~~~~ 'Disable Feedback Commands' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFeedbackCommands Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 215D1DC57D9C41DF4EB1AA3912BE2F3D24563D21 ~~~~~ 'Disable Feedback Commands' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFeedbackCommands Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 215D1DC57D9C41DF4EB1AA3912BE2F3D24563D21 ~~~~~ 'Disable Feedback Commands' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFeedbackCommands Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 215D1DC57D9C41DF4EB1AA3912BE2F3D24563D21 ~~~~~ 'Disable Feedback Commands' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableFeedbackCommands Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser address bar. If "DisableFeedbackCommands" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Disable Feedback Commands Policy State: Enabled macOS "plist" file: <key>DisableFeedbackCommands</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisableFeedbackCommands": true

V-251581 CAT II Firefox encrypted media extensions must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 8A86C7701AAF7AFC10C4A0569A54F6C385B6ACBC ~~~~~ 'Enable Encrypted Media Extensions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Lock Encrypted Media Extensions' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 8A86C7701AAF7AFC10C4A0569A54F6C385B6ACBC ~~~~~ 'Enable Encrypted Media Extensions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Lock Encrypted Media Extensions' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8A86C7701AAF7AFC10C4A0569A54F6C385B6ACBC ~~~~~ 'Enable Encrypted Media Extensions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Lock Encrypted Media Extensions' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8A86C7701AAF7AFC10C4A0569A54F6C385B6ACBC ~~~~~ 'Enable Encrypted Media Extensions' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Enabled Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Lock Encrypted Media Extensions' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- Comments

Check Text

Type "about:policies" in the browser address bar. If "EncryptedMediaExtensions" is not displayed under Policy Name or the Policy Value does not have "Enabled" set to "false" or the Policy Value does not have "Locked" set to "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Encrypted Media Extensions Policy Name: Enable Encrypted Media Extensions Policy State: Disabled Policy Name: Lock Encrypted Media Extensions Policy State: Enabled macOS "plist" file: <key>EncryptedMediaExtensions</key> <dict> <key>Enabled</key> <false/> <key>Locked</key> <true/> Linux "policies.json" file: Add the following in the policies section: "EncryptedMediaExtensions": { "Enabled": false, "Locked": true }

V-252881 CAT II Firefox must be configured to not delete data upon shutdown.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1E64720123BFAF6BC93D8E8F268B629CD52A80CF ~~~~~ 'Active Logins' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Sessions Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Browsing History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: History Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cache' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cache Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cookies' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cookies Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Downloads Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Form & Search History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: FormData Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Locked' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Offline Website Data' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: OfflineApps Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Site Preferences' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: SiteSettings Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1E64720123BFAF6BC93D8E8F268B629CD52A80CF ~~~~~ 'Active Logins' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Sessions Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Browsing History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: History Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cache' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cache Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cookies' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cookies Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Downloads Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Form & Search History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: FormData Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Locked' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Offline Website Data' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: OfflineApps Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Site Preferences' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: SiteSettings Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1E64720123BFAF6BC93D8E8F268B629CD52A80CF ~~~~~ 'Active Logins' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Sessions Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Browsing History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: History Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cache' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cache Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cookies' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cookies Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Downloads Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Form & Search History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: FormData Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Locked' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Offline Website Data' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: OfflineApps Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Site Preferences' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: SiteSettings Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1E64720123BFAF6BC93D8E8F268B629CD52A80CF ~~~~~ 'Active Logins' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Sessions Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Browsing History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: History Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cache' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cache Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Cookies' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Cookies Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Download History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Downloads Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Form & Search History' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: FormData Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Locked' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: Locked Value: 0x00000001 (1) Type: REG_DWORD ----------------------------------------------------------------------- 'Offline Website Data' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: OfflineApps Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- 'Site Preferences' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown Name: SiteSettings Value: 0x00000000 (0) Type: REG_DWORD ----------------------------------------------------------------------- Comments

Check Text

Type "about:policies" in the browser address bar. If "SanitizeOnShutdown" is not displayed under Policy Name or the Policy Value does not have {"Cache":false,"Cookies":false,"Downloads":false,"FormData":false,"Sessions":false,"History":false,"OfflineApps":false,"SiteSettings":false,"Locked":true}, this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Clear data when browser is closed Policy Name: Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences, Offline Website Data Policy State: Disabled Policy Name: Locked Policy State: Enabled macOS "plist" file: Add the following: <key>SanitizeOnShutdown</key> <dict> <key>Cache</key> <false/> <key>Cookies</key> <false/> <key>Downloads</key> <false/> <key>FormData</key> <false/> <key>History</key> <false/> <key>Sessions</key> <false/> <key>SiteSettings</key> <false/> <key>OfflineApps</key> <false/> <key>Locked</key> <true/> </dict> Linux "policies.json" file: Add the following in the policies section: "SanitizeOnShutdown": { "Cache": false, "Cookies": false, "Downloads": false, "FormData": false, "History": false, "Sessions": false, "SiteSettings": false, "OfflineApps": false, "Locked": true }

V-251559 CAT III Firefox development tools must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 90A6EC33E50882CBA3EBE554E7AF5D63390EBB52 ~~~~~ 'Disable Developer Tools' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableDeveloperTools Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 90A6EC33E50882CBA3EBE554E7AF5D63390EBB52 ~~~~~ 'Disable Developer Tools' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableDeveloperTools Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 90A6EC33E50882CBA3EBE554E7AF5D63390EBB52 ~~~~~ 'Disable Developer Tools' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableDeveloperTools Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 90A6EC33E50882CBA3EBE554E7AF5D63390EBB52 ~~~~~ 'Disable Developer Tools' is Enabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: DisableDeveloperTools Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Type "about:policies" in the browser window. If "DisableDeveloperTools" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Developer Tools Policy State: Enabled macOS "plist" file: Add the following: <key>DisableDeveloperTools</key> <true/> Linux "policies.json" file: Add the following in the policies section: "DisableDeveloperTools": true

V-251565 CAT III Firefox autoplay must be disabled.

4 assets 4 Closed Mozilla Firefox Secu...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 803B3356D8C8FF4D18EC5D51E46DA611EEB61D98 ~~~~~ 'Default autoplay level' is Enabled (Block Audio and Video) Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Permissions\Autoplay Name: Default Value: block-audio-video Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 803B3356D8C8FF4D18EC5D51E46DA611EEB61D98 ~~~~~ 'Default autoplay level' is Enabled (Block Audio and Video) Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Permissions\Autoplay Name: Default Value: block-audio-video Type: REG_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 803B3356D8C8FF4D18EC5D51E46DA611EEB61D98 ~~~~~ 'Default autoplay level' is Enabled (Block Audio and Video) Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Permissions\Autoplay Name: Default Value: block-audio-video Type: REG_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 803B3356D8C8FF4D18EC5D51E46DA611EEB61D98 ~~~~~ 'Default autoplay level' is Enabled (Block Audio and Video) Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Permissions\Autoplay Name: Default Value: block-audio-video Type: REG_SZ Comments

Check Text

Type "about:policies" in the browser address bar. If "Permissions" is not displayed under Policy Name or the Policy Value is not "Autoplay" with a value of "Default" and "Block-audio-video", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Permissions\Autoplay Policy Name: Default autoplay level Policy State: Enabled Policy Value: Block Audio and Video macOS "plist" file: Add the following: <key>Permissions</key> <dict> <key>Autoplay</key> <dict> <string>block-audio-video</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Permissions": { "Autoplay": { "Default": "block-audio-video" } }

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text