Question: Does anybody know something like little snitch (application firewall) but with centralized rules support (something we can "push" to every macbook?).
Also, what are you trying to protect against using Little Snitch in this way? Are you a paranoid group of journalist dissidents who are suspecting targeted spyware, or are you just frustrated that installed apps "call home" to check for updates and whatnot?
Perhaps you should better invest in setting up a traditional firewall on the lan for central configuration. Then you also have the option for other IDS systems, such as https://www.snort.org/
Of-course we also have a "traditional" firewall on the LAN. But this is not on the application level but on the network level.
This can't be right, as you yourself originally stated `for the non-technical persons in our company its near to impossible to identify "good" from "bad" connections.`.