From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Fri, 9 Aug 2024 14:33:52 +0000 (-0400) Subject: Initial checkin of templates for DLP X-Git-Tag: v6.6~6^2~4 X-Git-Url: https://git.p6c8.net/policy-templates.git/commitdiff_plain/528fd2d1c69be561cc397f8a83ac87cdd55d1789 Initial checkin of templates for DLP --- diff --git a/docs/index.md b/docs/index.md index aecc3be..6401204 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1246,7 +1246,7 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati `AgentTimeout` is the timeout in number of seconds after a DLP request is sent to the agent. After this timeout, the request will be denied unless `DefaultResult` is set to 1 or 2. The default is 30. -`AllowUrlRegexList` is a space-separated list of regular expressions that indicates URLs for which DLP operations will always be allowed without consulting the agent. The default is "^about:(?!blank|srcdoc).*", meaning that any pages that start with "about:" will be exempt from DLP except for "about:blank" and "about:srcdoc", as these can be controlled by web content. +`AllowUrlRegexList` is a space-separated list of regular expressions that indicates URLs for which DLP operations will always be allowed without consulting the agent. The default is "^about:(?!blank|srcdoc).*", meaning that any pages that start with "about:" will be exempt from DLP except for "about:blank" and "about:srcdoc", as these can be controlled by web content. `BypassForSameTabOperations` indicates whether Firefox will automatically allow DLP requests whose data comes from the same tab and frame - for example, if data is copied to the clipboard and then pasted on the same page. The default is false. diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index 3bb91c5..67c9ac4 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -100,6 +100,7 @@ Proxy Settings Security Devices Firefox Suggest (US only) + Content Analysis Allowed Sites Allowed Sites (Session Only) Blocked Sites @@ -1118,6 +1119,51 @@ If this policy is disabled or not configured, HTTPS-Only Mode is not enabled.If this policy is enabled, you can specify a list origins that will not be upgraded to HTTPS. If this policy is disabled or not configured, all origins are upgraded to HTTPS if HTTPS-Only Mode is enabled. + Agent Timeout + If this policy is enabled, you can specify a space-separated list of regular expressions that indicates URLs for which DLP operations will always be allowed without consulting the agent. The default is "^about:(?!blank|srcdoc).*", meaning that any pages that start with "about:" will be exempt from DLP except for "about:blank" and "about:srcdoc", as these can be controlled by web content. + +If this policy is disabled or not configured, the DLP agent will always be consulted. + Allow Url Regex List + If this policy is enabled, you can specify a space-separated list of regular expressions that indicates URLs for which DLP operations will always be allowed without consulting the agent. The default is "^about:(?!blank|srcdoc).*", meaning that any pages that start with "about:" will be exempt from DLP except for "about:blank" and "about:srcdoc", as these can be controlled by web content. + +If this policy is disabled or not configured, the DLP agent will always be consulted. + Bypass For Same Tab Operations + If this policy is enabled, Firefox will automatically allow DLP requests whose data comes from the same tab and frame - for example, if data is copied to the clipboard and then pasted on the same page. + +If this policy is disabled or not configured, Firefox will not automatically allow DLP requests whose data comes from the same tab and frame. + Client Signature + If this policy is enabled, you can set the required signature of the DLP agent connected to the pipe. If this is a non-empty string and the DLP agent does not have a signature with a Subject Name that exactly matches this value, Firefox will not connect to the pipe. + +If this policy is disabled or not configured, the signature will not be verified. + Default Result + If this policy is enabled, you can indicate the desired behavior for DLP requests if there is a problem connecting to the DLP agent. + +If this policy is disabled or not configured, the DLP request will be denied if there is a problem connecting to the agent. + Deny the request + Warn the user and allow them to choose whether to allow or deny + Allow the request + Deny Url Regex List + If this policy is enabled, you can specify a space-separated list of regular expressions that indicates URLs for which DLP operations will always be denied without consulting the agent. + +If this policy is disabled or not configured, the DLP agent will always be consulted. + Enabled + If this policy is enabled, Firefox will use DLP. + +If this policy is disabled or not configured, Firefox will not use DLP. + +Note: If this policy is enabled and no DLP agent is running, all DLP requests will be denied unless Default Result is set to 1 or 2. + Is Per User + If this policy is disabled, the pipe the DLP agent creates is per-system. + +If this policy is enabled or not configured, the pipe the DLP agent creates is per-user. + Pipe Path Name + If this policy is enabled, you can change the name of the pipe for the DLP agent. + +If this policy is disabled or not configured, the default pipe name of 'path_user'is used. + Show Blocked Result + If this policy is disabled, Firefox will not show a notification when a DLP request is denied. + +If this policy is enabled or not configured, Firefox will show a notification when a DLP request is denied. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: @@ -1487,6 +1533,12 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + + + + + + diff --git a/windows/firefox.admx b/windows/firefox.admx index 89322cb..0823d55 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -168,6 +168,9 @@ + + + @@ -4270,5 +4273,103 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +