Missing firewall options in Jamf Pro

[rpayne]

How do we manage the "Automatically allow built-in software to receive incoming connections" and "Automatically allow downloaded signed software to receive incoming connections" options in the Firewall pane of System Settings? The only options in Jamf Pro are "Block all incoming connections and Control incoming connections for specific apps."

Am I missing something?

Screen shots for reference.

[rpayne]

Here is the only options in Jamf Pro

[RaxiaDK]

 This is what Firewall can https://developer.apple.com/documentation/devicemanagement/firewall

[RaxiaDK]

[AJPinto]

Apple only has minimum controls for the macOS firewall build into the MDM protocols. Keep in mind that managing a Firewall technically falls under Security not Device Management, and you would want a security tool to manage this.

[user-pWhYjAZxRj]

According to Apple's Developer Configuration Profile Reference, the following keys are not supported. Both will be forced ON when the Firewall profile is activated (through Jamf Pro for example):

• Automaticallyallowsigneddownloadedsoftware
• Automaticallyallowbuilt-insoftware options

See page 44 of https://developer.apple.com/business/documentation/Configuration-Profile-Reference.pdf

[JevermannNG]

I use ProfileCreator for those settings. Just make sure that the exported Profile is signed before uploaded to the Jamf Server, otherwise Jamf might handle it wrong: