AOSX-13-001080 - The macOS Application Firewall must be enabled.

Information

The Application Firewall is the built-in firewall that comes with macOS and must be enabled. Firewalls protect computers from network attacks by blocking or limiting access to open network ports. Application firewalls limit which applications are allowed to communicate over the network.

Solution

To enable the firewall, run the following command:

/usr/bin/sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_OS_X_10-13_V2R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-214901r609363_rule, STIG-ID|AOSX-13-001080, STIG-Legacy|SV-96395, STIG-Legacy|V-81681, Vuln-ID|V-214901

Plugin: Unix

Control ID: b438da99d0de8035007e66b460d98ef11ae5c6637de1944180ce8482f19337b8