← Back to Apple macOS 13 (Ventura) Security Technical Implementation Guide

V-257242

CAT II (Medium)

The macOS Application Firewall must be enabled.

Rule ID

SV-257242r991593_rule

STIG

Apple macOS 13 (Ventura) Security Technical Implementation Guide

Version

V1R5

CCIs

CCI-000366

Discussion

Firewalls protect computers from network attacks by blocking or limiting access to open network ports. Application firewalls limit which applications are allowed to communicate over the network.

Check Content

Verify the macOS system is configured to enable the built-in firewall with the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "EnableFirewall\|EnableStealthMode"

EnableFirewall = 1;
EnableStealthMode = 1;

If "EnableFirewall" and "EnableStealthMode" are not set to "1", this is a finding.

Fix Text

Configure the macOS system to enable the built-in firewall by installing the "Restrictions Policy" configuration profile.