macOS Sequoia change breaks networking for VPN, antivirus software

macOS Sequoia change breaks networking for VPN, antivirus software

September 20, 2024 at 11:47AM

Users of macOS 15 ‘Sequoia’ are experiencing network connection errors when using certain EDR or VPN solutions and web browsers. Issues are resolved when these tools are deactivated, indicating network stack incompatibility. Some products advised against upgrading to macOS 15 due to networking structure changes. Temporary solutions and advisories have been offered by security vendors and researchers.

Based on the meeting notes, the key takeaways are:

– Users of macOS 15 ‘Sequoia’ are experiencing network connection errors when using certain endpoint detection and response (EDR) or virtual private network (VPN) solutions, and web browsers. Deactivating these tools resolves the issues, suggesting compatibility problems with the network stack.

– Reddit users have reported problems with CrowdStrike Falcon and ESET Endpoint Security, as well as firewall issues leading to SSL failures in web browsers or difficulties using ‘wget’ and ‘curl.’

– CrowdStrike has advised customers not to upgrade to macOS 15 Sequoia until a Mac sensor is released that fully supports the new operating system.

– SentinelOne Support also warned users not to upgrade to macOS Sequoia due to usability issues.

– Connectivity issues with Mullvad VPN and corporate VPN products have been reported, but ProtonVPN reportedly works fine with the latest macOS release.

– The deprecation of a feature in the operating system’s firewall may also be causing issues, as Application Firewall settings are no longer contained in a property list.

– Possible solutions provided include ESET’s advisory to remove ESET Network from the network filters in System Settings, a temporary solution offered by security researcher Wacław Jacek, and a less than ideal solution suggested by Will Dormann to address the built-in firewall’s handling of UDP traffic.

– Mullvad VPN is actively working towards a solution for the issues their users are facing with the latest macOS release.

In conclusion, users of EDR security products, VPNs, or those relying on strict firewall configurations should consider postponing the move to macOS 15 until the reported problems are addressed.

Full Article