Review automatic firewall access for signed Mac software

If you want to approve incoming access app by app, turn off Automatically allow downloaded signed software to receive incoming connections. You can separately decide whether to turn off the corresponding option for built-in software.

These options automatically add eligible software to the firewall’s allowed list without asking you. A valid software signature identifies the signer and supports integrity checks; it does not prove that every feature, update, or network service is safe or needed.

The options are available only while the macOS firewall is turned on.

macOS 13 and later

  1. Choose Apple menu > System Settings > Network > Firewall.
  2. Turn on Firewall, then click Options.
  3. Turn off Automatically allow downloaded signed software to receive incoming connections if you want explicit decisions for downloaded signed apps and services.
  4. Separately review Automatically allow built-in software to receive incoming connections.
  5. Click OK.
Firewall options with automatic incoming access disabled for built-in and downloaded signed software

macOS 10.11 through 12

  1. Choose Apple menu > System Preferences > Security & Privacy > Firewall.
  2. Unlock the preference pane and click Firewall Options.
  3. Deselect the automatic allowance for downloaded signed software and, if appropriate, built-in software.
  4. Click OK.
Legacy Firewall Options with automatic incoming access disabled for signed software

Security and functional limits

  • Turning these options off does not block all signed software permanently. macOS can ask you to allow or deny a new incoming connection, and you can add an explicit rule.
  • Until you answer a firewall prompt, connection attempts to an unlisted app are denied.
  • Disabling automatic access can interrupt legitimate server, collaboration, discovery, or sharing features.
  • This setting concerns incoming connections. It does not monitor or approve an app’s outgoing connections and is separate from Gatekeeper’s decision about whether an app may launch.

Primary sources

You might also be interested in

Check your security settings

SimpleumCheck Screenshot

SimpleumCheck checks the security settings on your Mac in three stages and gives you recommendations on how you can improve your security even further.

For Free

Protect and encrypt your data

SimpleumSafe Screenshot


Protect your data with SimpleumSafe App for Mac, iPhone and iPad. Don’t compromise when it comes to protecting your data.

Other security setting to check

PLEASE READ THE FOLLOWING TIP AND DISCLAIMER!

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck End User License Agreement (EULA).