Firewall
com.apple.security.firewall
The payload that configures the firewall.
Not available with User Enrollment · macOS: device channel only
Configuration Keys (8)
| Key | Type | Description | Default | Range |
|---|---|---|---|---|
| boolean | If 'true', the system enables the firewall. | Default: — | Range: — | |
BlockAllIncomingbooleanBlock All Incoming Connections | boolean | If 'true', the system enables blocking all incoming connections. | Default: false | Range: — |
EnableStealthModebooleanEnable Stealth Mode | boolean | If 'true', the system enables stealth mode. | Default: false | Range: — |
ApplicationsarrayApplications | array | The list of apps with connections that the firewall controls. | Default: — | Range: — |
| dict | A firewall application item- | Default: — | Range: — | |
| string | The bundle identifier for the app. | Default: — | Range: — | |
| string | Name of application (Undocumented) | Default: — | Range: — | |
| boolean | If 'true', the system allows connections for the app. | Default: — | Range: — | |
EnableLoggingbooleanEnable Logging | boolean | If 'true', the system enables logging. Available in macOS 12 through macOS 14.6. | Default: false | Range: — |
LoggingOptionstringLogging Option | string | The type of logging. Available in macOS 12 and through macOS 14.6. | Default: — | Range: Throttled (throttled), Brief (brief), Detail (detail) |
| boolean | If 'true', the system allows built-in software to receive incoming connections. Note: The system ensures that 'AllowSigned' always has a value. If missing from the payload, the system sets it to 'true'. | Default: true | Range: — | |
| boolean | If 'true', the system allows downloaded signed software to receive incoming connections. Note: The system ensures that 'AllowSignedApp' always has a value. If missing from the payload, the system sets it to 'true'. | Default: true | Range: — |