How to Configure Firewall Settings in macOS 13

Configuring the built-in firewall in macOS 13 (Ventura) protects your computer by monitoring and blocking unauthorized incoming network connections. This guide covers how to access the redesigned System Settings, enable the firewall, manage individual application permissions, and adjust advanced security rules like Stealth Mode to keep your Mac secure.

Accessing the Firewall in macOS 13

macOS 13 replaced the traditional System Preferences with System Settings. To locate the firewall:

  1. Click the Apple menu () in the top-left corner of your screen.
  2. Select System Settings.
  3. In the left sidebar, click Network.
  4. Click Firewall in the right pane.

Turning the Firewall On or Off

  1. In the Firewall menu, locate the toggle switch next to Firewall.
  2. Click the toggle to switch it to the On position (it will turn green/blue depending on your theme).
  3. If prompted, enter your administrator password or use Touch ID to confirm the change.

Configuring Advanced Firewall Options

Once the firewall is enabled, you can customize how it handles specific applications and network requests by clicking the Options button.

Managing Application Permissions

By default, the firewall allows signed software to receive incoming connections. You can manually control access for individual apps:

  1. Click the Options button in the Firewall pane.
  2. To add an app, click the Add (+) button beneath the application list, select the app from your Applications folder, and click Open.
  3. To change an app's permissions, click the arrows next to its name and choose either Allow incoming connections or Block incoming connections.
  4. To remove an app from the list, select it and click the Remove (-) button.

Adjusting Global Connection Rules

Inside the Options panel, you can toggle several global security settings:

  • Block all incoming connections: Blocks all incoming traffic except for essential system services (such as DHCP and Bonjour) required for basic network operation.
  • Automatically allow built-in software to receive incoming connections: Allows trusted Apple apps and services to accept network connections without manual approval.
  • Automatically allow downloaded signed software to receive incoming connections: Permits validly signed third-party software to accept incoming traffic automatically.
  • Enable stealth mode: Prevents your Mac from responding to probing requests, such as ICMP ping requests, making your device harder to detect on public or unsecured networks.

Saving Your Configuration

After configuring your desired permissions and security options, click OK to save and apply the settings immediately. Your Mac will now filter network traffic according to the configured rules.