3 weeks ago
How do we manage the "Automatically allow built-in software to receive incoming connections" and "Automatically allow downloaded signed software to receive incoming connections" options in the Firewall pane of System Settings? The only options in Jamf Pro are "Block all incoming connections and Control incoming connections for specific apps."
Am I missing something?
Screen shots for reference.
3 weeks ago
Here is the only options in Jamf Pro
3 weeks ago
This is what Firewall can https://developer.apple.com/documentation/devicemanagement/firewall
3 weeks ago
2 weeks ago
Apple only has minimum controls for the macOS firewall build into the MDM protocols. Keep in mind that managing a Firewall technically falls under Security not Device Management, and you would want a security tool to manage this.
2 weeks ago
According to Apple's Developer Configuration Profile Reference, the following keys are not supported. Both will be forced ON when the Firewall profile is activated (through Jamf Pro for example):
See page 44 of https://developer.apple.com/business/documentation/Configuration-Profile-Reference.pdf
2 weeks ago
I use ProfileCreator for those settings. Just make sure that the exported Profile is signed before uploaded to the Jamf Server, otherwise Jamf might handle it wrong: