Add more detail to the macOS Sequoia changes and their effect on WARP (#27021)

* Add more detail to the macOS Sequoia changes and their effect on WARP

* make the phrasing more professional

* Update firewall.mdx

---------

Co-authored-by: ranbel <[email protected]>

Author: tojens-ietf

src/content/docs/cloudflare-one/team-and-resources/devices/warp/deployment/firewall.mdx

@@ -179,12 +179,20 @@ If your organization does not currently allow inbound/outbound communication ove
 
       `com.cloudflare.1dot1dot1dot1dot1.macos` (Bundle ID)
 
-  :::caution
 
-  Due to changes in macOS Sequoia version 15.0 and 15.0.1., you must update your macOS firewall settings to allow the WARP client to manage your device's firewall.
+  :::caution[macOS 15.0 through 15.4]
 
-  To ensure proper functionality, disable the [Block all incoming connections](https://support.apple.com/guide/mac-help/change-firewall-settings-on-mac-mh11783/mac) option in your macOS firewall settings.
+  Due to changes in macOS Sequoia versions 15.0 through 15.4, you must update your [macOS firewall settings](https://support.apple.com/guide/mac-help/change-firewall-settings-on-mac-mh11783/mac) to allow the WARP client to manage your device's firewall. Later versions of macOS are not affected because of changes Apple introduced to fix the unexpected breaking changes in their firewall.
 
+	To allow the WARP client to function on macOS Sequoia versions 15.0 through 15.4 while still blocking unwanted incoming traffic, follow these steps:
+
+		1. Turn off the following [macOS firewall settings](https://support.apple.com/guide/mac-help/change-firewall-settings-on-mac-mh11783/mac):
+			- **Block all incoming connections**
+			- **Automatically allow built-in software to receive incoming connections**
+			- **Automatically allow downloaded signed software to receive incoming connections**
+		2. Add the [WARP daemon and GUI processes](#required-scopes) to the firewall exceptions list and set them to _Allow incoming connections_.
+		3. Restrict the other allow exceptions to only the processes you want receiving traffic.
+		4. (Optional) Do not grant users administrative privileges, otherwise they will be able to modify firewall settings and exceptions.
   :::
 
 ### Optional scopes