fleet/schema/tables/alf.yml
Mike McNeil 576d4da11c
Table: Update alf.yml (#8326)
* Update alf.yml

* Update alf.yml

Co-authored-by: Guillaume Ross <guillaume@fleetdm.com>
2022-10-27 20:06:33 -05:00

16 lines
650 B
YAML

name: alf
description: Details about the status of the built-in firewall protection on this Mac.
examples: >-
See the state of the Application Layer Firewall on a Mac. A result of 0 means
it is disabled, 1 means it is enabled, and 2 means it is enabled and blocking
all inbound connections. See our standard query library for an example policy
query using this.
```
SELECT global_state FROM alf;
```
notes: >-
- This table provides information about the built-in firewall in macOS, also known as [Application Layer Firewall (ALF)](https://support.apple.com/guide/mac-help/block-connections-to-your-mac-with-a-firewall-mh34041/mac)