2.6.5 Review Application Firewall Rules

Information

A firewall minimizes the threat of unauthorized users from gaining access to your system while connected to a network or the Internet. Which applications are allowed access to accept incoming connections through the firewall is important to understand.

Solution

Perform the following to implement the prescribed state:
1. Open System Preferences
2. Select Security & Privacy
3. Select Firewall Options
4. Select unneeded rules
5. Select the minus sign below to delete them

Alternatively:
1. Edit and run the following command in Terminal to remove specific applications:
/usr/libexec/ApplicationFirewall/socketfilterfw --remove </Applications/badapp.app>
2. Where </Applications/badapp.app> is the one to be removed

See Also

https://workbench.cisecurity.org/files/301

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CSCv6|9.2

Plugin: Unix

Control ID: 51bc1816a26ba8523b57dfacd80b2591e5daf1419e22f3ea7201189793c96bbd