The payload that configures the firewall.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
EnableFirewall EnableFirewall If `true`, the system enables the firewall. | boolean | required | — | ✓Yes | macOS (10.12+) |
BlockAllIncoming BlockAllIncoming If `true`, the system enables blocking all incoming connections. | boolean | optional | — | ✓Yes | macOS (10.12+) |
EnableStealthMode EnableStealthMode If `true`, the system enables stealth mode. | boolean | optional | — | ✓Yes | macOS (10.12+) |
Applications Applications The list of apps with connections that the firewall controls. 1 subkey | array | optional | — | ✓Yes | macOS (10.12+) |
└─ Applications ApplicationsItem 2 subkeys | dictionary | — | ✓Yes | macOS (10.12+) | |
└─ └─ Application identifier BundleID The bundle identifier for the app. | string | required | — | ✓Yes | macOS (10.12+) |
└─ └─ Allow connections Allowed If `true`, the system allows connections for the app. | boolean | required | — | ✓Yes | macOS (10.12+) |
AllowSigned AllowSigned If `true`, the system allows built-in software to receive incoming connections.
> Note:
> The system ensures that `AllowSigned` always has a value. If missing from the payload, the system sets it to `true`. | boolean | optional | true | ✓Yes | macOS (12.3+) |
AllowSignedApp AllowSignedApp If `true`, the system allows downloaded signed software to receive incoming connections.
> Note:
> The system ensures that `AllowSignedApp` always has a value. If missing from the payload, the system sets it to `true`. | boolean | optional | true | ✓Yes | macOS (12.3+) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information