Rotate your device back to portrait to use STIG Vault.
The Apple OS X 10.13 Security Technical Implementation Guide (V2 R5) has 135 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
If HBSS is used, this is not applicable.
To check if the macOS firewall has logging enabled, run the following command:
/usr/libexec/ApplicationFirewall/socketfilterfw --getloggingmode | /usr/bin/grep on
If the result does not show "on", this is a finding.
To enable the firewall logging, run the following command:
/usr/bin/sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on