주요 콘텐츠로 건너뛰기

177: Firewall

Implementation Effort: Medium
User Impact: Low to Medium

Overview​

Managing the macOS firewall through Intune helps enforce baseline host protection on managed Macs. It is one of the controls that prevents the endpoint from depending entirely on network perimeter assumptions, which is important for remote and mobile users.

In Zero Trust, the intent is to keep device exposure low, especially on untrusted networks, while still allowing approved apps and management traffic to function predictably.

Implementation Guidance​

Define the desired firewall state​

  • Decide whether the built-in macOS application firewall should be enabled for all managed Macs and whether stealth mode or similar hardening settings are required.
  • Document any approved exceptions and the business reason for them before deployment.
  • Review how firewall policy interacts with developer tools, peer-to-peer workflows, or remote support utilities used in the organization.

Configure through Intune​

  • Use the supported macOS endpoint security Firewall policy or settings catalog settings in the Microsoft Intune admin center, depending on which settings are needed.
  • Separate baseline firewall enablement from higher-risk exceptions so changes can be governed independently.
  • Pilot the policy on devices with representative app stacks and network conditions before broad rollout.

Monitor and refine​

  • Track user impact and support cases to identify legitimate app communication issues caused by the new policy.
  • Review profile deployment results and device-side logs when troubleshooting inconsistent behavior.
  • Revisit exceptions periodically to ensure temporary allowances are removed.

Reference​