The popularity of Mac machines has been increasing due to its impenetrable security, which lacks in other leading operating systems. Ever since the Mac machines were developed, they became popular due to the fact that they can’t catch any virus. Presently, Mac is the first and foremost choice for all the security seekers.

Also, any local app that will run on the computer can punch holes in the firewall; it’s designed to assist the apps requiring incoming connections work without the additional configuration. Nevertheless, a firewall is not that necessary on the typical Mac desktop. Jun 28, 2016 The firewall that appears with the OS X does not prevent the connection of unauthorized apps and services with the internet. It just deals with the blocking of the connections that are incoming. HOW TO MAKE CHANGES IN THE FIREWALL TO ALLOW SOME APPS TO COMMUNICATE First of all, a user must know about the location of the firewall tab in the system.

Now that Mac needs no introduction for its security wall, it is important that you know how to turn on Mac firewall from the settings. Also, there are a few tasks that require every shield to be put on hold, you must also be aware on how to disable firewall on Mac. Today, we’re going to talk about the Mac firewall settings that you must know including the guide on how to unblock firewall.

How to Enable Firewall on Mac?

When you feel a need to deploy basic security on your Mac machine, you must know how to unblock firewall on Mac by following the below steps:

  1. Click on the Apple icon on the top left-hand corner and choose System Preferences.
  2. Now, click on Security or Security & Privacy icon.
  3. Select the Firewall tab on the opened window.
  4. There, click on the lock icon and enter the administrative password in order to make any changes.
  5. Now, click on ‘Turn On Firewall’ or you may enable it by clicking on the ‘Start’.
See Also:-
11 Ways To Secure Your MacBookOur Safety is at our hands! Let us keep our Mac safe and secure by following a few simple steps.

How to Disable Firewall on Mac?

If you wish to disable firewall on Mac, you just need to follow the same steps as you would do to enable it and click on the ‘Turn Off Firewall’ option instead to start or turning it on.

How to set up Firewall on Mac using advanced settings?

Now that you’ve tweaked the Mac firewall settings and learned to enable/disable it on the machine, you’re also allowed to perform advanced level changes. By using advanced settings, you can control on how the Mac firewall performs.

You can get to the advanced settings by clicking on the ‘Firewall Options’ button (or Advanced for OS X). There, you would see a list of apps that are allowed to transmit and receive network traffic. If you wish to add or remove any app from the list, you can easily do it by clicking on the ‘-’ button against the specific app when you select it and ‘+’ to add new one to the list.

Overall, Mac is an amazingly great machine that is capable of performing any task smoothly. Once you’re familiar with Mac firewall settings, it becomes handy for you to enable or disable the firewall on Mac. if you use your machine frequently for online payments, it is important that you know how to turn on Mac firewall.

Mac Firewall Allow App
See Also:-
{FIXED}: OBS Windows Capture Black Screen Issue 2020

Also, knowing on how to unblock firewall on Mac is equally important as it may restrict some of the programs that are important to you. As soon as you get your head around to know how to setup firewall on Mac, you may apply changes as often as you wish. If you wish to share some tips, do let’s know in the comments below.

What Do You Think?

This article shows you the endpoint protection settings that you can configure for devices that run macOS. You configure these settings by using a macOS device configuration profile for endpoint protection in Intune.

Before you begin

Create a macOS endpoint protection profile.


Use the firewall to control connections per-application, rather than per-port. Using per-application settings makes it easier to get the benefits of firewall protection. It also helps prevent undesirable apps from taking control of network ports that are open for legitimate apps.

  • Enable Firewall

    Turn use of Firewall on macOS and then configure how incoming connections are handled in your environment.

    • Not configured (default)
    • Yes
  • Block all incoming connections

    Block all incoming connections except the connections required for basic Internet services, such as DHCP, Bonjour, and IPSec. This feature also blocks all sharing services, such as File Sharing and Screen Sharing. If you're using sharing services, then keep this setting as Not configured.

    • Not configured (default)
    • Yes

    When you set Block all incoming connections to Not configured, you can then configure which apps can or can't receive incoming connections.

    Apps allowed: Configure a list of apps that are allowed to receive incoming connections.

    • Add apps by bundle ID: Enter the bundle ID of the app. Apple's web site has a list of built-in Apple apps.
    • Add store app: Select a store app you previously added in Intune. For more information, see Add apps to Microsoft Intune.

    Apps blocked: Configure a list of apps that have incoming connections blocked.

    • Add apps by bundle ID: Enter the bundle ID of the app. Apple's web site has a list of built-in Apple apps.
    • Add store app: Select a store app you previously added in Intune. For more information, see Add apps to Microsoft Intune.
  • Enable stealth mode

    To prevent the computer from responding to probing requests, enable stealth mode. The device continues to answer incoming requests for authorized apps. Unexpected requests, such as ICMP (ping), are ignored.

    • Not configured (default)
    • Yes

Mac Firewall Allow App Android


  • Allow apps downloaded from these locations

    Limit the apps a device can launch, depending on where the apps were downloaded from. The intent is to protect devices from malware, and allow apps from only the sources you trust.

    • Not configured (default)
    • Mac App Store
    • Mac App Store and identified developers
    • Anywhere
  • Do not allow user to override Gatekeeper

    Prevents users from overriding the Gatekeeper setting, and prevents users from Control clicking to install an app. When enabled, users can Control-click any app, and install it.

    • Not configured (default) - Users can Control-click to install apps.
    • Yes - Prevents users from using Control-click to install apps.


For more information about Apple FileVault settings, see FDEFileVault in the Apple developer content.


Mac Firewall Allow App Mac

Mac network firewall

Mac Firewall Allow App Windows 10

As of macOS 10.15, FileVault configuration requires user approved MDM enrollment.

  • Enable FileVault

    You can enable Full Disk Encryption using XTS-AES 128 with FileVault on devices that run macOS 10.13 and later.

    • Not configured (default)
    • Yes

    When Enable FileVault is set to Yes, you can configure the following settings:

    • Recovery key type

      Personal key recovery keys are created for devices. Configure the following settings for the personal key.

    • Escrow location description of personal recovery key

      Specify a short message to the user that explains how and where they can retrieve their personal recovery key. This text is inserted into the message the user sees on their sign in screen when prompted to enter their personal recovery key if a password is forgotten.

    • Personal recovery key rotation

      Specify how frequently the personal recovery key for a device will rotate. You can select the default of Not configured, or a value of 1 to 12 months.

    • Hide recovery key

      Choose to hide the personal key from a device user during FileVault 2 encryption.

      • Not configured (default) – The personal key is visible to the device user during encryption.
      • Yes - The personal key is hidden from the device user during encryption.

      After encryption, device users can view their personal recovery key for an encrypted macOS device from the following locations:

      • iOS/iPadOS company portal app
      • Intune app
      • company portal website
      • Android company portal app

      To view the key, from the app or website, go to device details of the encrypted macOS device and select get recovery key.

    • Disable prompt at sign out

      Prevent the prompt to the user that requests they enable FileVault when they sign out. When set to Disable, the prompt at sign-out is disabled and instead, the user is prompted when they sign in.

      • Not configured (default)
      • Yes - Disable the prompt at sign-out.
    • Number of times allowed to bypass

      Set the number of times a user can ignore prompts to enable FileVault before FileVault is required for the user to sign in.

      • Not configured - Encryption on the device is required before the next sign-in is allowed.
      • 0 - Require devices to encrypt the next time a user signs in to the device.
      • 1 to 10 - Allow a user to ignore the prompt from 1 to 10 times before requiring encryption on the device.
      • No limit, always prompt - The user is prompted to enable FileVault but encryption is never required.

      The default for this setting depends on the configuration of Disable prompt at sign out. When Disable prompt at sign out is set to Not configured, this setting defaults to Not configured. When Disable prompt at sign out is set to Yes, this setting defaults to 1 and a value of Not configured isn't an option.

Next steps

Assign the profile and monitor its status.

Mac Firewall Block Application

You can also configure endpoint protection on Windows 10 and newer devices.