PayloadKit

Firewall

com.apple.security.firewall

The payload that configures the firewall.

macOS
macOS 10.12+combined

Configuration Keys (8)

KeyTypeTitle
EnableFirewallrequired

If 'true', the system enables the firewall.

booleanEnable Firewall
BlockAllIncoming

If 'true', the system enables blocking all incoming connections.

Default: false

booleanBlock All Incoming Connections
EnableStealthMode

If 'true', the system enables stealth mode.

Default: false

booleanEnable Stealth Mode
Applications

The list of apps with connections that the firewall controls.

arrayApplications
EnableLogging

If 'true', the system enables logging. Available in macOS 12 through macOS 14.6.

Default: false

booleanEnable Logging
LoggingOption

The type of logging. Available in macOS 12 and through macOS 14.6.

Range: Throttled (throttled), Brief (brief), Detail (detail)

stringLogging Option
AllowSigned

If 'true', the system allows built-in software to receive incoming connections. Available in macOS 12.3 and later. Note: The system ensures that 'AllowSigned' always has a value. If missing from the payload, the system sets it to 'true'.

Default: true

booleanAllow Incoming Connections to macOS-Bundled Software
AllowSignedApp

If 'true', the system allows downloaded signed software to receive incoming connections. Available in macOS 12.3 and later. Note: The system ensures that 'AllowSignedApp' always has a value. If missing from the payload, the system sets it to 'true'.

Default: true

booleanAllow Incoming Connections to Downloaded Signed Apps
ApplicationsItemrequired

A firewall application item-

dictApplications
BundleIDrequired

The bundle identifier for the app.

stringApplication Identifier
Namerequired

Name of application (Undocumented)

stringName
Allowedrequired

If 'true', the system allows connections for the app.

booleanAllow connections