+11How do we manage the "Automatically allow built-in software to receive incoming connections" and "Automatically allow downloaded signed software to receive incoming connections" options in the Firewall pane of System Settings? The only options in Jamf Pro are "Block all incoming connections and Control incoming connections for specific apps."
Am I missing something?
Screen shots for reference.
+11Here is the only options in Jamf Pro
+10
+26Apple only has minimum controls for the macOS firewall build into the MDM protocols. Keep in mind that managing a Firewall technically falls under Security not Device Management, and you would want a security tool to manage this.
According to Apple's Developer Configuration Profile Reference, the following keys are not supported. Both will be forced ON when the Firewall profile is activated (through Jamf Pro for example):
See page 44 of https://developer.apple.com/business/documentation/Configuration-Profile-Reference.pdf
+8I use ProfileCreator for those settings. Just make sure that the exported Profile is signed before uploaded to the Jamf Server, otherwise Jamf might handle it wrong:
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
