macOS Firewall Configuration for Dermi Atlas Professional

Checking Firewall Status

No manual macOS firewall configuration is required for LAN access. Dermi Atlas Manager publishes the Dermi Atlas Professional service ports (webapp, websocket, and gateway) through Docker, and macOS does not need per-port inbound rules for those published ports. Reserve any allow-list step for the Docker application, and only when the firewall is set to block all incoming connections.

1. Open System Settings.
2. Go to Network => Firewall.
3. Check if the firewall is enabled. If disabled, no configuration is needed. If enabled, no configuration is needed either unless the firewall is set to block all incoming connections, in which case see the Docker allow-list step below.

Allowing Incoming Connections

On macOS no per-application firewall change is required for LAN access, because the Dermi Atlas Manager handles port exposure through Docker and the macOS Application Firewall does not gate the published service ports. If the firewall is set to block all incoming connections and clients cannot connect, the application to allow is Docker, not Dermi Atlas Manager:

1. Click Options.
2. Look for Docker Desktop in the list.
3. Ensure it is set to Allow incoming connections.
4. If not listed, click +, select Docker (Docker.app) from Applications, and add it.
5. Click OK.

Using Terminal

Manual socketfilterfw configuration is not needed on macOS for Dermi Atlas Professional, because the service ports are published by Docker rather than by Dermi Atlas Manager. If the firewall is set to block all incoming connections and clients still cannot reach the host after the allow-list step above, the application to add and unblock is Docker, not Dermi Atlas Manager. Verify the Docker.app bundle path on the target macOS and Docker Desktop version before running these commands:

# Add Docker to the macOS Application Firewall
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add /Applications/Docker.app

# Unblock the application
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp /Applications/Docker.app