Turning on Firewall

[casareanderson]

Hi All i just wanted to know how people are managing turning on the firewall on your machines as i have 60 machines that i need to turn the firewall on but dont know the best way around this

[franton · Accepted solution]

I would point you to this:

https://github.com/franton/CIS-Apple-Security-Casper/tree/master/2.6.3%20Enable%20Firewall

That's an EA to detect firewall setting and a script to turn it on.

Oh and if you want firewall stealth mode on too, then I have this:

https://github.com/franton/CIS-Apple-Security-Casper/tree/master/2.6.4%20Enable%20Firewall%20Stealth...

[casareanderson]

thank you i going to use the stealth mode

[franton]

You will have to use both ;) The first detects whether the firewall is on or not. The second sets stealth mode on/off. So the firewall must be on for the stealth mode setting to have an effect.

[edickson]

Can these scripts be pushed out using Jamf Now?

[CSD]

Even I want to know how do we push these scripts 

[N30]

You can create a configuration profiles so,

1. Create a configuration profiles, under Security and Privacy you can enable Firewall and add the firewall exclusion that you want

2. Define the scope of the computer where you want to apply this profile. 

3. The firewall of user OSX will be controlled by Jamf now (when the Jamf policy sync in). 

[TraianNiculai]

works like a charm