Terminal command to show FileVault and Firewall settings

I'm as a system admin and a big pain is physically checking people's private MacBooks for FileVault and firewall settings.

Is there a way to get the Terminal to output the FileVault and Firewall settings?

Solution 1:

You get the FileVault status with:

fdesetup status

You get the Application Firewall status with:

/usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate

You get a verbose pf status with:

sudo pfctl -sa

Further readings: man fdesetup|pfctl and /usr/libexec/ApplicationFirewall/socketfilterfw -h.