How to set Firefox and Java exceptions in a domain?

Question

Java

Hello
I'm trying to solve the following problem - we have a set of web portals in our organization that use Java applets and require pop-ups to function properly (in addition, they are also signed with a crooked certificate issued by the provider organization itself). In connection with the migration of users within the organization, as well as the relatively high turnover of certain positions, the question arose - is it possible using GPO or another tool to automatically allow Java and pop-up windows on strictly defined sites, while continuing to block them on all other resources (ideally even just disabling java outside of these sites), because attempts to nail users to run java and allow pop-ups when moving to a new workplace have failed. The corresponding buttons simply do not see.
In addition, due to a slanting self-signed certificate, when accessing web portals from a new workplace in Firefox, a warning about an incorrect certificate appears and requires you to add it to the exceptions. Is it possible to resolve this with domain policy tools?