2.6.3 Enable Firewall

Information

A firewall is a piece of software that blocks unwanted incoming connections to a system. Apple has posted general documentation about the application firewall.

http://support.apple.com/en-us/HT201642

Rationale:

A firewall minimizes the threat of unauthorized users from gaining access to your system while connected to a network or the Internet.

Impact:

The firewall may block legitimate traffic. Applications that are unsigned will require special handling.

Solution

Perform the following to implement the prescribed state:

Open System Preferences

Select Security & Privacy

Select Firewall

Select Turn On Firewall

Alternatively:

Run the following command in Terminal:

defaults write /Library/Preferences/com.apple.alf globalstate - int <value>



Where <value> is:


1 = on for specific services


2 = on for essential services

Additional Information:

http://docs.info.apple.com/article.html?artnum=306938

See Also

https://workbench.cisecurity.org/files/3092

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CSCv6|9.2

Plugin: Unix

Control ID: 2c34db2939df481e0eceb7184a7f077e10efc2755d504ee044a53908833a02f4