diff --git a/schema/tables/alf_exceptions.yml b/schema/tables/alf_exceptions.yml
index bda45c54b5..a87d151187 100644
--- a/schema/tables/alf_exceptions.yml
+++ b/schema/tables/alf_exceptions.yml
@@ -1,4 +1,5 @@
 name: alf_exceptions
+description: The exceptions configured for the [built-in firewall protection](https://fleetdm.com/tables/alf) on this Mac.
 examples: >-
   List applications that are able to receive inbound connections across the
   firewall. This is useful when looking to see if vulnerable software is exposed
@@ -9,3 +10,6 @@ examples: >-
   SELECT * FROM alf_exceptions;
 
   ```
+columns:
+  - name: state
+    description: Firewall [exception state](https://krypted.com/mac-security/command-line-alf-on-mac-os-x/)