I'm having trouble with a firewall exception not seeming to work.
I found the bundle ID of the app (found using osascript -e 'id of app "Name of App"') and put it into the config profile in the the "App-Specific Incoming Connection Settings" section of the Firewall tab in Security & Privacy. (please see below)
However, when I deploy the Config Profile out to our lab, the user still sees the "Do you want the application "Prinergy Evo" to accept incoming network connections?" message when they start the program. Our lab users are not admins, so they're not able to allow the connections.
Any ideas what I might try, or what I've done wrong?