Firewall

com.apple.security.firewall

The payload that configures the firewall.

macOS

macOS 10.12+combined

Configuration Keys (8)

Key	Type	Title	Description	Default	Range
`EnableFirewall`required	boolean	Enable Firewall	If 'true', the system enables the firewall.	—	—
`BlockAllIncoming`	boolean	Block All Incoming Connections	If 'true', the system enables blocking all incoming connections.	false	—
`EnableStealthMode`	boolean	Enable Stealth Mode	If 'true', the system enables stealth mode.	false	—
`Applications`	array	Applications	The list of apps with connections that the firewall controls.	—	—
`ApplicationsItem`required	dict	Applications	A firewall application item-	—	—
`BundleID`required	string	Application Identifier	The bundle identifier for the app.	—	—
`Name`required	string	Name	Name of application (Undocumented)	—	—
`Allowed`required	boolean	Allow connections	If 'true', the system allows connections for the app.	—	—
`BundleID`required	string	Application Identifier	The bundle identifier for the app.	—	—
`Name`required	string	Name	Name of application (Undocumented)	—	—
`Allowed`required	boolean	Allow connections	If 'true', the system allows connections for the app.	—	—
`EnableLogging`	boolean	Enable Logging	If 'true', the system enables logging. Available in macOS 12 through macOS 14.6.	false	—
`LoggingOption`	string	Logging Option	The type of logging. Available in macOS 12 and through macOS 14.6.	—
`AllowSigned`	boolean	Allow Incoming Connections to macOS-Bundled Software	If 'true', the system allows built-in software to receive incoming connections. Available in macOS 12.3 and later. Note: The system ensures that 'AllowSigned' always has a value. If missing from the payload, the system sets it to 'true'.	true	—
`AllowSignedApp`	boolean	Allow Incoming Connections to Downloaded Signed Apps	If 'true', the system allows downloaded signed software to receive incoming connections. Available in macOS 12.3 and later. Note: The system ensures that 'AllowSignedApp' always has a value. If missing from the payload, the system sets it to 'true'.	true	—
`ApplicationsItem`required	dict	Applications	A firewall application item-	—	—
`BundleID`required	string	Application Identifier	The bundle identifier for the app.	—	—
`Name`required	string	Name	Name of application (Undocumented)	—	—
`Allowed`required	boolean	Allow connections	If 'true', the system allows connections for the app.	—	—
`BundleID`required	string	Application Identifier	The bundle identifier for the app.	—	—
`Name`required	string	Name	Name of application (Undocumented)	—	—
`Allowed`required	boolean	Allow connections	If 'true', the system allows connections for the app.	—	—