<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1398472956;
mso-list-type:hybrid;
mso-list-template-ids:-943296064 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><b><i><span lang="FR-CA" style="font-size:12.0pt;font-family:"Arial",sans-serif;color:green">Classification: UNCLASSIFIED</span></i></b><span lang="FR-CA" style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Hey Alex,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Interesting, but deployment wise, SCCM has legs in every segment of the network.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">End-user desktops are whitelisted to update from the web using the Firefox maintenance app, however the PAW’s are segmented because they are for administration.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">So PAWs <i>DO</i> get the updated, however only when I change the base version of the deployment package for Firefox on SCCM.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The way is works is that I deploy a base version to every desktops and the detection is done on a “Greater or Equal…” basis, so desktops are allowed to updated themselves and SCCM doesn’t attempt to reinstall
it. But since PAWs don’t access the web, they’re stuck until I deploy a new base version.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Essentially, I’m trying to update one less package manually by building an offline solution for everyone.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="FR-CA" style="font-size:10.0pt;color:#1F497D;mso-fareast-language:EN-CA">Éric Périard<o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA">Laboratory Administrator
<b>|</b> Administrateur du laboratoire<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA">Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA">Telephone
<b>|</b> Téléphone: 613-991-3555<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA">Email | Courriel:
<a href="mailto:Eric.Periard@cyber.gc.ca"><span style="color:blue">Eric.Periard@cyber.gc.ca</span></a><br>
Website | Site Web: <a href="https://www.cyber.gc.ca/"><span style="color:blue">https://www.cyber.gc.ca/</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA">Government of Canada
<b>|</b> Gouvernement du Canada<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D"><img border="0" width="452" height="57" style="width:4.7083in;height:.5937in" id="_x0000_i1031" src="cid:image001.png@01D5479F.615329F0" alt="cid:image002.png@01D4ADA3.F54E4950"></span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D;mso-fareast-language:EN-CA"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D;mso-fareast-language:EN-CA"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><i><span style="font-size:8.0pt;color:#1F497D;mso-fareast-language:EN-CA">NOTICE: This message and accompanying attachments contain information that is intended only for the use of the individual or entity to which it is addressed. Any
dissemination, distribution, copying or action taken in reliance on the contents of this communication by anyone other than the intended recipient is strictly prohibited. If you have received this communication in error, please notify the sender immediately
at the above address and delete the e-mail.</span></i></b><b><i><span style="font-size:8.0pt;color:#1F497D;mso-fareast-language:EN-CA"><o:p></o:p></span></i></b></p>
<p class="MsoNormal"><b><i><span lang="EN-CA" style="font-size:8.0pt;color:#1F497D;mso-fareast-language:EN-CA"><o:p> </o:p></span></i></b></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><i><span lang="FR-CA" style="font-size:8.0pt;color:#1F497D;mso-fareast-language:EN-CA">AVIS : Le présent message et toutes les pièces jointes qui l'accompagnent contiennent de l'information destinée uniquement
à la personne ou à l'entité à laquelle elle est adressée. Toute diffusion, distribution ou copie de son contenu par une autre personne que son destinataire est strictement interdite. Si vous avez reçu ce message par erreur, veuillez informer immédiatement
l’expéditeur à l’adresse ci-dessus puis l’effacer.<o:p></o:p></span></i></b></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:windowtext">From:</span></b><span style="color:windowtext"> Alexandre GAUVRIT <agauvrit@tranquil.it>
<br>
<b>Sent:</b> Wednesday, July 31, 2019 10:57 AM<br>
<b>To:</b> Éric Périard <Eric.Periard@ccirc-ccric.ca>; Enterprise@mozilla.org<br>
<b>Subject:</b> Re: [Mozilla Enterprise] Firefox ESR Offline Patching solution.<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Hi,<span style="font-size:12.0pt"><o:p></o:p></span></p>
<p>There is also an Open-Source alternative to SCCM which can fulfill your need, it's WAPT Deployment software.<o:p></o:p></p>
<p>The store provides pre-made Firefox and Firefox ESR packages : <a href="https://store.wapt.fr/store/?search=Firefox&sort=popular">
https://store.wapt.fr/store/?search=Firefox&sort=popular</a><o:p></o:p></p>
<p>If your scope of endpoint is out of SCCM scope, it can be a good solution<o:p></o:p></p>
<p>Alexandre<o:p></o:p></p>
<div>
<p class="MsoNormal">Le 29/07/2019 à 17:47, Éric Périard a écrit :<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><a name="Classify_Bookmark"><b><i><span lang="FR-CA" style="font-size:12.0pt;font-family:"Arial",sans-serif;color:green">Classification: UNCLASSIFIED</span></i></b></a><b><i><span lang="FR-CA" style="font-size:12.0pt;font-family:"Arial",sans-serif;color:green">
// Public</span></i></b><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Greetings colleagues,<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">I work in a border-line paranoid secure environment where we make use of air-gapped PAW (<i>Privileged Access Workstations</i>) to administer the network.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">The issue is well… it’s air-gapped, meaning there’s no access to the internet at all from those workstations and everything is tightly controlled.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Also to deploy the updates, <b><i><u>I use SCCM</u></i></b>. For end-user systems we whitelist the access so browsers can update themselves however that’s not possible for the PAW’s.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">So I’ve got a few questions:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Is there a GPO or some kind of solution to redirect where Firefox ESR fetches it’s update?
<b><i><span style="font-size:8.0pt">(Without trying to spoof URLs which I’m sure change often)</span></i></b><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Where would I get the update patches instead of the entire installer EXE?<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Is above possible at all?<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Thank you as always….<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b><span lang="FR-CA" style="font-size:10.0pt;mso-fareast-language:EN-CA">Éric Périard</span></b><o:p></o:p></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;mso-fareast-language:EN-CA">Laboratory Administrator
<b>|</b> Administrateur du laboratoire</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;mso-fareast-language:EN-CA">Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;mso-fareast-language:EN-CA">Email | Courriel:
</span><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA"><a href="mailto:Eric.Periard@cyber.gc.ca"><span style="color:blue">Eric.Periard@cyber.gc.ca</span></a><br>
</span><span lang="FR-CA" style="font-size:9.0pt;mso-fareast-language:EN-CA">Website | Site Web:
</span><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA"><a href="https://www.cyber.gc.ca/"><span style="color:blue">https://www.cyber.gc.ca/</span></a></span><o:p></o:p></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;mso-fareast-language:EN-CA">Government of Canada
<b>|</b> Gouvernement du Canada</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="FR-CA" style="font-size:9.0pt;color:#1F497D;mso-fareast-language:EN-CA"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D"><img border="0" width="452" height="57" style="width:4.7083in;height:.5937in" id="Picture_x0020_1" src="cid:image001.png@01D5479F.615329F0" alt="cid:image002.png@01D4ADA3.F54E4950"></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D;mso-fareast-language:EN-CA"> </span><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:8.0pt;mso-fareast-language:EN-CA">NOTICE: This message and accompanying attachments contain information that is intended only for the use of the individual or entity to which it is addressed. Any dissemination,
distribution, copying or action taken in reliance on the contents of this communication by anyone other than the intended recipient is strictly prohibited. If you have received this communication in error, please notify the sender immediately at the above
address and delete the e-mail.</span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span lang="EN-CA" style="font-size:8.0pt;mso-fareast-language:EN-CA"> </span></i></b><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><i><span lang="FR-CA" style="font-size:8.0pt;mso-fareast-language:EN-CA">AVIS : Le présent message et toutes les pièces jointes qui l'accompagnent contiennent de l'information destinée uniquement à la personne
ou à l'entité à laquelle elle est adressée. Toute diffusion, distribution ou copie de son contenu par une autre personne que son destinataire est strictement interdite. Si vous avez reçu ce message par erreur, veuillez informer immédiatement l’expéditeur à
l’adresse ci-dessus puis l’effacer.</span></i></b><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Enterprise mailing list<o:p></o:p></pre>
<pre><a href="mailto:Enterprise@mozilla.org">Enterprise@mozilla.org</a><o:p></o:p></pre>
<pre><a href="https://mail.mozilla.org/listinfo/enterprise">https://mail.mozilla.org/listinfo/enterprise</a><o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>To unsubscribe from this list, please visit <a href="https://mail.mozilla.org/listinfo/enterprise">https://mail.mozilla.org/listinfo/enterprise</a> or send an email to <a href="mailto:enterprise-request@mozilla.org">enterprise-request@mozilla.org</a> with a subject of "unsubscribe"<o:p></o:p></pre>
</blockquote>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">--
<o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellpadding="0" width="0" style="width:8.75in">
<tbody>
<tr>
<td valign="bottom" style="padding:.75pt 37.5pt .75pt .75pt">
<div>
<p class="MsoNormal"><strong><span style="font-family:"Trebuchet MS",sans-serif;color:#FF6600">Alexandre GAUVRIT, administrateur systèmes et réseaux / RSSI / DPO</span></strong><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
</span><span style="font-family:"Trebuchet MS",sans-serif;color:#333399">Tranquil IT</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
</span><span style="font-family:"Trebuchet MS",sans-serif;color:#333399">12 avenue Jules Verne (Bât. A)</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
</span><span style="font-family:"Trebuchet MS",sans-serif;color:#333399">44230 Saint Sébastien sur Loire (FRANCE)</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
</span><span style="font-family:"Trebuchet MS",sans-serif;color:#333399">tel: +33 (0) 240 975 755</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
</div>
</td>
<td valign="bottom" style="padding:.75pt 37.5pt .75pt .75pt">
<div>
<p class="MsoNormal"><em><span style="font-family:"Arial",sans-serif">Retrouvez-nous sur les réseaux :</span></em><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><a href="https://twitter.com/TRANQUIL_IT" title="Twitter"><span style="text-decoration:none"><img border="0" id="_x0000_i1026" src="https://www.tranquil.it/wp-content/uploads/01_twitter.png" alt="twitter"></span></a> <a href="https://www.linkedin.com/company/3108003/" title="Linkedin"><span style="text-decoration:none"><img border="0" id="_x0000_i1027" src="https://www.tranquil.it/wp-content/uploads/07_linkedin.png" alt="linkedin"></span></a> <a href="https://www.youtube.com/channel/UCl45FZItnoOlXsaWUa3UrTw" title="Youtube"><span style="text-decoration:none"><img border="0" id="_x0000_i1028" src="https://www.tranquil.it/wp-content/uploads/03_youtube.png" alt="youtube"></span></a><o:p></o:p></span></p>
</div>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">
<hr size="2" width="100%" align="center">
</span></div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><a href="https://tranquil.it"><span style="text-decoration:none"><img border="0" id="_x0000_i1030" src="https://www.tranquil.it/wp-content/uploads/logo_tranquilit_petit.png" alt="Tranquil IT"></span></a><o:p></o:p></span></p>
</div>
</td>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:windowtext"><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>