2.6.4 Enable Firewall Stealth Mode

Information

Stealth mode on the firewall minimizes the threat of system discovery tools while connected to a network or the Internet.

Solution

Perform the following to implement the prescribed state:
1. Open System Preferences
2. Select Security & Privacy
3. Select Firewall Options
4. Select Enable stealth mode

Alternatively:
1. Run the following command in Terminal:
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on

See Also

https://workbench.cisecurity.org/files/301

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CSCv6|9.2

Plugin: Unix

Control ID: 76a82af1cdf151f61665ca9b9a8b332f370eb03cefa3a065c80593faaa883eee