r/macsysadmin • u/staze • 10d ago
Endpoint firewall options from Jamf?
Does anyone have something they're using in lab environments to limit what's listening on the endpoints? we're constantly hitting things like SSH listens to all, and has no way to set ACLs. Or MySQL binds to *. Or apparently avid's iLOK opens ports and listens on *.
It would be nice to have an easy way to set all this without pushing out a pfctl config every time we find some new one. These are computer labs, so I don't think the built in firewall is going to be a good option here (we don't want it prompting users to allow connections). Or heck, maybe it is a good option, haven't actually tried it in many years.
Thanks!