Mozilla Firefox Security Technical Implementation Guide

The Mozilla Firefox Security Technical Implementation Guide (V6 R9) has 33 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

33STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R9

CurrentPublished Wed Sep 30 2026

Background submission of information to Mozilla must be disabled.

Mozilla Firefox Security Technical Implementation Guide

Assessment Title

Rule Text

Background submission of information to Mozilla must be disabled.

Description

Discussion Text

Firefox by default sends information about Firefox to Mozilla servers. There should be no background submission of technical and other information from DoD computers to Mozilla with portions posted publicly.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251558

Rule

SV-251558r960963_rule

Severity

medium

Rule Version

FFOX-00-000014

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Type "about:policies" in the browser window. 

If "DisableTelemetry" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Implementation Procedure

Fix Text

Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox
Policy Name: Disable Telemetry
Policy State: Enabled

macOS "plist" file:
Add the following:
<key>DisableTelemetry</key>
<true/>

Linux "policies.json" file:
Add the following in the policies section:
"DisableTelemetry": true

STIG check 13 of 33 in the Mozilla Firefox STIG checklist

← Previous · V-251557Firefox must be configured to disable the installation of extensions.Next · V-251559 →Firefox development tools must be disabled.