The Firewall profile configuration enables you to configure device firewall settings to prevent unauthorized connections to your enterprise network.

Enable Firewall Settings Enable the Firewall on managed macOS devices and display the profile configuration options.
Block All Incoming Connections Block all incoming connections except those required for basic Internet services, such as DHCP, Bonjour, and IPSec.
Enable Stealth Mode Prevent managed macOS devices from responding to probing requests that can be used to reveal their existence. The device still answers requests from authorized apps, but unauthorized requests such as ICMP (ping) get no response.
Add Applications Click the Add button to allow or deny incoming network access for specific apps.