The system's local firewall must implement a deny-all, allow-by-exception policy.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22583	GEN008540 M6	SV-39384r1_rule	ECSC-1	Medium

Description
A local firewall protects the system from exposing unnecessary or undocumented network services to the local enclave. If a system within the enclave is compromised, firewall protection on an individual system continues to protect it from attack.

STIG	Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide Draft	2013-01-10

Details

Check Text ( C-29318r1_chk )
Determine if the system's local firewall implements a deny-all, allow-by-exception policy. If it does not, this is a finding.

Fix Text (F-26350r1_fix)
Configure the system's local firewall to implement a deny-all, allow-by-exception policy.