Getting started with Firefox for your enterprise browser

This document describes the basic steps needed to deploy Firefox as an enterprise browser, from choosing a version of Firefox, download, deployment, and configuration. It provides a high-level overview for getting Firefox installed and managed across your organization, whether you're using Windows, macOS, or Linux.

Choose a version of Firefox

Consider which version of Firefox suits your organization before downloading and deploying it:

Firefox: The stable release channel has a major version released every two weeks, which includes the latest features and fixes.
Firefox Extended Support Release (ESR): The ESR channel is a long-term support channel branched once per year from the latest major Firefox release. Security and stability updates are backported as minor and patch versions during the release's lifecycle.
Firefox Enterprise: A dedicated version of Firefox for organizations with strict security, governance and compliance requirements, managed from an Admin Console that runs on your own infrastructure.

If you prefer faster feature delivery, use Firefox. If your organization needs stability over features, use Firefox ESR. If you need centralized management, company sign-in or data protection controls, evaluate Firefox Enterprise. See Choosing a Firefox release channel for more information.

Download Firefox for your platform

Choose the installers for the environments that you are deploying to. Available installers are:

Windows: 64-bit and 32-bit .exe installers; 64-bit and 32-bit .msi installers; ARM64/AArch64 builds
macOS: Universal .dmg build for Intel and Apple Silicon
Linux: 64-bit and 32-bit tarballs; ARM64/AArch64 tarballs

The installers and executables for Firefox and Firefox ESR can be found on the Firefox downloads page.

Firefox is also published as a Flatpak package on Flathub. See Configuring a Flatpak package for details.

Deploy Firefox

Once you've selected a version of Firefox and downloaded the appropriate installers, the next step is to deploy Firefox across your devices. Firefox is deployed using a variety of common enterprise management tools:

Method	Description
Group Policy (GPO)	Most suited for Windows environments. Supports machine-wide installs and policy control.
Microsoft Intune	Supports `.msi` deployment, update management, and policy enforcement on Windows.
SCCM / Endpoint Manager	Suitable for large-scale Windows deployments. The `.msi` is recommended for silent or automated configuration.
Jamf Pro (macOS)	Deploy the macOS `.dmg` or `.pkg` versions, including custom configurations and profiles.
MDM (macOS/Linux)	Firefox supports configuration profiles for macOS and JSON-based policy deployment for Linux.
Custom	Custom scripts can deploy the tarball or `.dmg` on Linux or macOS.

Configure policies

After Firefox is deployed, you can manage browser behavior using enterprise policies. Enterprise policies do not need to be bundled with the Firefox installer, but can be independently applied using the same management software used to deploy Firefox:

Windows Group Policy (GPO) - via ADMX templates
macOS configuration profiles - deployed through Jamf or MDM
Linux JSON configuration files - typically placed in /etc/firefox/policies/policies.json

For more information, see the Configuring policies guide. Common policies include:

ExtensionSettings - set per-extension rules to control installation, updates, and permissions.
Homepage - set a company homepage
Certificates - import or trust custom root CAs
BlockAboutConfig - prevent users from modifying advanced preferences
Proxy - configure proxy settings or enforce a PAC file

For a list of available policies, see the policy reference. Additionally, policy templates are available for Windows, macOS, and Linux in the github.com/mozilla/policy-templates repository.

Policy example (Linux/macOS policy JSON)

This example policies.json file disables automatic Firefox updates and sets a locked company homepage:

{
  "policies": {
    "DisableAppUpdate": true,
    "Homepage": {
      "URL": "https://internal.example.com",
      "Locked": true
    }
  }
}