If you set Stealth Mode to Not configured in your device compliance policy, you can still enable Stealth Mode by configuring a device configuration policy to enable stealth mode on the device. This setting is located in the macOS settings catalog under Networking > Firewall:

Single road train signs are also available, to view these online please click here. To view the full range of heavy vehicle signs please click here

After devices upgrade to macOS 15, they may report a non-compliant status with the Enable stealth mode setting showing an error:

We were recently alerted that some macOS devices may turn non-compliant after upgrading to macOS 15 if Stealth Mode is enabled in a device compliance policy. This setting is in the macOS compliance policy located under System Security. When stealth mode is enabled, the Mac devices do not respond to either “ping” requests or connection attempts from a closed TCP or UDP network. Stealth mode can be configured through compliance policy or by configuring firewall through the settings catalog.

Additionally, if you want to prevent devices from upgrading to macOS 15, you can configure software update delay restrictions in the settings catalog. This will delay macOS 15 from being offered on devices for a specified period of time:

09/24/24: Starting in macOS 15, if you block incoming connections, it will also include stealth mode. We’re actively working on a change to only check Stealth Mode if Incoming connections is not configured. This means you’ll no longer need to configure both settings and can safely set Stealth Mode to Not configured if Incoming connections is set to Block.

Available in two different materials, metal and self adhesive. Select your preferred options from the drop down menu above.

WorkaroundIf you're experiencing an issue where the device turns non-compliant after upgrading to macOS 15, you can mitigate this by configuring the Stealth Mode setting to be Not configured for devices running macOS 15 and later:

We’ll continue to update this post as new information becomes available. If you have questions or comments for the Intune team, reply to this post or reach out on X @IntuneSuppTeam.

This two part road train sign is used to warn motorists that a vehicle is over 30m in length. One sign features black text reading ROAD and the other with black text reading TRAIN, both on a Class 1 reflective yellow background.

Under the Heavy Vehicle National Law (HVNL), certain longer combinations are required to be fitted with a long vehicle warning sign. Combinations more than 30m will require a road train sign displayed at the rear.

This two part road train sign is used to warn motorists that a vehicle is over 30m in length. One sign features black text reading ROAD and the other with black text reading TRAIN, both on a Class 1 reflective yellow background.

Updated 9/24/24: Starting in macOS 15, if you block incoming connections, it will also include stealth mode. We’re actively working on a change to only check Stealth Mode if Incoming connections is not configured. This means you’ll no longer need to configure both settings and can safely set Stealth Mode to Not configured if Incoming connections is set to Block.