Should a Mac firewall block every incoming connection?
A fleet of MacBooks managed through and MDM is being prepared for a locked policy. The policy would turn on the macOS , block every incoming connection, and enforce without letting employees change the settings. The goal is to reduce possible when the laptops connect to untrusted networks outside the company.
The tradeoff is that receiving through AirDrop and AirPlay stops working, as does , causing strong employee resistance. It remains un whether blocking all incoming connections is necessary protection for roaming laptops or an overly restrictive policy.
Key points
- The MacBook fleet is managed with and MDM.
- The planned policy locks the , full incoming-connection block, and settings.
- The goal is to reduce exposure on untrusted networks.
- The policy prevents receiving through AirDrop and AirPlay and stops .
- No final balance between and convenience has been established.