Fix a Mac firewall that blocks app
We'll confirm the app is blocked, open System Settings Firewall, add the app in Firewall Options, and rule out stealth mode—or tell you when to contact IT.
What you'll need
- Mac with admin access
- The app that is blocked
Step-by-step diagnostic
Quick triage — pick your path
Quick triage — pick your path
Choose the option that matches what you see. You can jump straight to that section.
- Follow this guide Work through the full procedure from confirming the symptom to Firewall Options.
- Add app in Firewall Options You know the firewall is blocking and want to add the app.
- Stealth mode The app is allowed but still fails; try turning off stealth mode.
- When to contact IT You cannot change firewall settings or the Mac is managed.
Show full guide
Steps
Goal: Confirm the app is blocked, open System Settings Firewall, add the app in Firewall Options, and rule out stealth mode.
- Run the app and try the action that fails (e.g. connect to a server, sync). If macOS shows a prompt asking to allow or block the app, the firewall is involved.
- Good: You see a firewall prompt or the app times out—proceed to Open Firewall Options.
- Bad: The app works—no firewall issue.
Add app in Firewall Options
Goal: Add the blocked app to the allowed list.
- Click the Apple menu → System Settings. On macOS Ventura or later: Network → Firewall. On older macOS: Security & Privacy → Firewall.
- Click Firewall Options (or “Open”). Enter admin password if prompted.
- Click the plus (+) button and browse to the app (usually in Applications). Select it and click Add. Set the app to “Allow incoming connections.”
- Good: The app is in the list with Allow. Restart the app and test—it should connect.
- Bad: Options is grayed out or locked—the Mac may be managed. See When to get help.
Stealth mode
Goal: Rule out stealth mode blocking the app.
- In Firewall Options, if “Enable stealth mode” is checked, uncheck it. Some apps fail when stealth mode is on.
- Restart the app and test.
- Good: The app connects.
- Bad: Still fails—check for Little Snitch or other third-party firewalls, or contact IT.
When to get help
- You cannot open Firewall Options or changes do not stick (managed Mac).
- You use Little Snitch or another firewall and are unsure how to allow the app.
- The app is allowed and stealth mode is off but it still fails—the problem may be elsewhere (network, server, VPN).
Verification
- The app appears in Firewall Options with “Allow incoming connections.”
- The app connects or completes the action that previously failed.
- No firewall prompt appears when you run the app.
Escalation ladder
Work from the device outward. Stop when the problem is fixed.
- Confirm symptom Verify the app fails to connect or you see a firewall prompt.
- Firewall Options Add the app to the allowed list in System Settings → Firewall Options.
- Stealth mode Turn off stealth mode if the app is allowed but still fails.
- Third-party firewall Check Little Snitch or other firewalls for blocking rules.
- Contact IT On managed Macs, IT must allow the app via policy.
What to capture if you need help
Before calling support or posting for help, have these ready. It speeds everything up.
- App name and version
- Whether you see a firewall prompt
- Whether Firewall Options is locked or grayed out
- Steps already tried
Does the app fail to connect or show a firewall prompt?
Run the app and try the action that fails. Look for a macOS prompt asking to allow or block.
You can change your answer later.
Can you open Firewall Options?
System Settings → Network → Firewall → Firewall Options. On managed Macs this may be locked.
You can change your answer later.
Is the app in the list with Allow?
Add the app with the plus button if missing. Set to Allow incoming connections.
You can change your answer later.
Is stealth mode on?
Stealth mode can block some traffic. Try turning it off.
You can change your answer later.
Contact IT
Done
Reviewed by Blackbox Atlas
Rate this guide
Was this helpful?
Thanks for your feedback.