Free macOS App “Firewally” Gives Real‑Time Visibility & Blocking of App Internet Traffic
What Happened – Firewally, a free macOS application available through the Apple App Store, lets users monitor each app’s outbound network activity, set default firewall policies, and instantly block or allow internet access on a per‑app basis. The tool also provides AI‑generated summaries explaining why an app may need network connectivity.
Why It Matters for Compliance & Audit Readiness
- Demonstrates a practical way to enforce SOC 2 CC6 (Logical Access) and CD2 (System Operations) controls by restricting unnecessary outbound connections.
- Generates real‑time logs that can be harvested as continuous evidence of access‑control enforcement for audit reviewers.
- Supports a defensible “least‑privilege” posture, reducing the attack surface that could lead to data‑exfiltration or malware communication.
Who Is Affected – Enterprises and professional services firms that manage macOS endpoints (e.g., tech‑SaaS companies, design studios, financial advisory firms).
Recommended Actions –
- Map Firewally’s per‑app blocking capability to your SOC 2 logical‑access policy.
- Integrate the tool’s traffic logs into your continuous‑monitoring pipeline for audit evidence.
- Validate that default firewall baselines align with the “deny‑by‑default” principle and document any exceptions.
Source: ZDNet article
Technical Notes – Firewally operates as a user‑space firewall overlay on macOS, leveraging the native Application Layer Firewall (ALF) APIs. No CVEs or vulnerabilities are disclosed; the relevance is procedural – controlling outbound traffic to mitigate data‑exfiltration risk. Source: same as above