Describe the solution you'd like
The MacOS - OIB - Compliance - U - Device Security - v1.0 compliance policy requires two out of the three options for firewall:
- Firewall: Enable
- Incoming connections: Block
The config policy MacOS - OIB - SC - Device Security - D - Firewall - v2.0 sets all three corresponding settings:
- Firewall: Enable
- Incoming connections: Block
- Enable Stealth Mode: True
Align compliance policy with configuration, the config policy is turning on stealth mode, you should align the compliance policy to confirm it is turned on.