Firewall
com.apple.security.firewall
The payload that configures the firewall.
Configuration Keys (8)
| Key | Type | Title |
|---|---|---|
EnableFirewallrequiredIf 'true', the system enables the firewall. | boolean | Enable Firewall |
BlockAllIncomingIf 'true', the system enables blocking all incoming connections. Default: false | boolean | Block All Incoming Connections |
EnableStealthModeIf 'true', the system enables stealth mode. Default: false | boolean | Enable Stealth Mode |
ApplicationsThe list of apps with connections that the firewall controls. | array | Applications |
EnableLoggingIf 'true', the system enables logging. Available in macOS 12 through macOS 14.6. Default: false | boolean | Enable Logging |
LoggingOptionThe type of logging. Available in macOS 12 and through macOS 14.6. Range: Throttled (throttled), Brief (brief), Detail (detail) | string | Logging Option |
AllowSignedIf 'true', the system allows built-in software to receive incoming connections. Available in macOS 12.3 and later. Note: The system ensures that 'AllowSigned' always has a value. If missing from the payload, the system sets it to 'true'. Default: true | boolean | Allow Incoming Connections to macOS-Bundled Software |
AllowSignedAppIf 'true', the system allows downloaded signed software to receive incoming connections. Available in macOS 12.3 and later. Note: The system ensures that 'AllowSignedApp' always has a value. If missing from the payload, the system sets it to 'true'. Default: true | boolean | Allow Incoming Connections to Downloaded Signed Apps |
ApplicationsItemrequiredA firewall application item- | dict | Applications |
BundleIDrequiredThe bundle identifier for the app. | string | Application Identifier |
NamerequiredName of application (Undocumented) | string | Name |
AllowedrequiredIf 'true', the system allows connections for the app. | boolean | Allow connections |