CIS ISO NIST CSF SOC

Firewall is on and configured

How to enable Firewall and Stealth mode

  • Open System Preferences, click Network, then Firewall.
  • Toggle Turn On Firewall.
  • Click Options..., scroll to the bottom, and toggle Enable stealth mode.

If you have issues with Pareto incorrectly reporting Firewall status, try resetting the permissions.

How to reset Firewall permissions

  • Open Pareto Security and go to PreferencesPermissions.
  • Click the Remove button for Firewall Access.
  • Click Authorize to re-grant the permissions.

If that doesn't resolve the issue, try the Terminal commands described below.

How to reset Firewall from Terminal

  • Open Terminal.
  • Check current firewall status:
    /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
  • Check stealth mode status:
    /usr/libexec/ApplicationFirewall/socketfilterfw --getstealthmode
  • Disable stealth mode:
    sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off
  • Disable the firewall:
    sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate off
  • Re-enable the firewall:
    sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
  • Re-enable stealth mode:
    sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on

More Mac checks