Computer Configuration > Policies > Centrify Settings > Mac OS X Settings > Firewall > Enable firewall
Prevent incoming network communication to all services and ports other than those explicitly enabled for the services specified in the Services pane of the Sharing system preferences.
- Block all incoming connections:
Block all incoming connections except those required for basic Internet services, such as DHCP, Bonjour, and IPSec.
Automatically allow signed software to receive incoming connections:
Allows software signed by a valid certificate authority to provide services accessed from the network. This setting will not take effect if Block all incoming connections is selected.
This policy takes effect dynamically at the next group policy refresh interval without rebooting the computer.