Users of macOS 15 ‘Sequoia’ are reporting significant networking issues related to virtual private networks (VPNs) and antivirus software following the recent update. Many have experienced connection errors when using certain endpoint detection and response (EDR) tools, including CrowdStrike Falcon and ESET Endpoint Security. These problems appear to be linked to incompatibilities with the new network stack introduced in macOS Sequoia, leading to disruptions in normal operations, such as packet corruption and SSL failures in web browsers.
In a private bulletin, CrowdStrike advised its customers not to upgrade to macOS 15 due to these changes in the operating system’s networking structures. Similarly, SentinelOne has also warned users against upgrading, citing usability issues that have emerged since the release. Affected users have reported intermittent connectivity problems with various VPN services, particularly Mullvad, while other services, like ProtonVPN, seem to be functioning without issues.
The macOS 15 update has deprecated certain firewall features that could contribute to these networking challenges. Specifically, changes in how the operating system handles Application Firewall settings may require developers to adjust their applications to use the new socketfilterfw command line tool, rather than modifying property lists as in previous versions. This shift has prompted developers to reassess how their applications interact with the macOS firewall.
For those facing connectivity issues, ESET has recommended a temporary fix: users should navigate to System Settings > Network > Filters and remove ESET Network from the list, followed by a system restart. Meanwhile, Mullvad VPN is aware of the ongoing problems and is actively working on a solution. Users who rely on EDR tools, VPNs, or strict firewall configurations should consider delaying their upgrade to macOS 15 until these compatibility issues are fully resolved, ensuring uninterrupted service.