MacOS Sequoia blocking VPN, won't allow use of Messages and iCloud

I worked with Express VPN support and was able to get things to work.

TLDR:

• Download the latest Mac client from Express VPN (they've made an update - more on this below)
• Completely uninstall Express VPN - I used AppCleaner to remove left over files
• Uninstall the left over IKEv2 Network configuration
• Reboot
• Install newly downloaded version of Express VPN
• Login and configure Express VPN but do not select the new "Allow Apple Services to bypass VPN checkbox" - more on this below.
• Enjoy

Further history:

• I was unable to get iCloud drive, notes, or messages to sync
• The only workaround for me that worked was switching to IKEv2 (you have to turn off advanced protection to do that).
• I reached out to support and had a long chat where we tested many things.
• They have created a new version with a new checkbox to allow Apple Services to bypass VPN. See https://www.expressvpn.com/support/knowledge-hub/network-lock/#apple-services
• For some reason Express VPN did not suggest the update. Maybe it is on a rolling canary and it would have in the next few weeks.
• I installed the new version on top of the my existing version and tried enabling the new setting based on advice from support.
• This messed my machine up further. iCloud stopped syncing even when quitting Express VPN. I tried multiple configuration permutations but could not sync.
• I told support I was going to do a full uninstall and did the steps listed above. At that point it was working even without turning on the new "Allow Apple service to bypass VPN..." checkbox.
• But I was curious and checked it and did more testing. It seems that did allow Messages to work. But iCloud drive and Notes would not sync. My suspicion is that in a rush to fix it they only tested Messages and somehow made things worse for the other Apple services.
• I've gone back to using what is working for me which is the uninstall / reinstall of a the new version with the settings I normally used (auto protocol, Advanced Protection turned on, network lock and allow access to network devices. But I did no not have "Allow Apple Services...".
  • Note that this new setting like the Allow network devices setting is tied to network lock. If you do not have network lock enabled, it is irrelevant and apple services will work regardless of it being set.

All of this makes me wonder if the change Apple made is causing issues with pre-installed VPNs but somehow allows traffic for newly installed ones. It seems to either be that or some other change Express VPN made in the new release.

I hope this helps someone else.

In a tech support call with ExpressVPN, I was told ExpressVPN is aware of the issue and it has been escalated to get fixed. For the time being, in your ExpressVPN settings, in the "general" tab, uncheck the box "Network Lock: Stop all internet traffic if the VPN disconnects unexpectedly." This seemed to work to allow messages to be sent and received, as well as allows FaceTime calls through Mac OS's newest upgrade.

This works for me. Awesome.

I had the same problem. ExpressVPN support asked me to change the protocol (had it set to Automatic) to IKEv2. That fixed it for me.

In a tech support call with ExpressVPN, I was told ExpressVPN is aware of the issue and it has been escalated to get fixed. For the time being, in your ExpressVPN settings, in the "general" tab, uncheck the box "Network Lock: Stop all internet traffic if the VPN disconnects unexpectedly." This seemed to work to allow messages to be sent and received, as well as allows FaceTime calls through Mac OS's newest upgrade.

Have you tried include the location Services? My VPN is a Business essential, and just start to require permission after the 15.0.1 update. It doesn't prompt the user, but requires a permission inside System Preferences > LocationServices > Details > Show location icon in Control Center when System Services request your location toggle. I know it's silly but replicate the error as I turned on and off.

I've track the error at the Console, and doesn't even flag as an error:

[corewifil APP NOT AUTHORIZED FOR LOCATION SERVICES, will not continue (status=0 pid=XXXX proc=YOUR_VPN bundleID=XXXXXXXXX codesignID=com.something.your_vpn.client service=com.apple.corewlan-xpc reg=GET SSID)

As some other actual posts:

As far as I'm concerned, the issue is closed with 15.1. now. All the hints and descriptions didn't work for me on 15.0. and 15.0.1.

Installing 15.1. directly solved the issue. Works as it should and as it did before.

AppleUserTech wrote:

In a tech support call with ExpressVPN, I was told ExpressVPN is aware of the issue and it has been escalated to get fixed. For the time being, in your ExpressVPN settings, in the "general" tab, uncheck the box "Network Lock: Stop all internet traffic if the VPN disconnects unexpectedly." This seemed to work to allow messages to be sent and received, as well as allows FaceTime calls through Mac OS's newest upgrade.

Even easier, remove the VPN app entirely.

In an effort to resolve this known bug of not getting text messages, etc. in Sequoia (as originally reported), I have updated macOS Sequoia to 16.0.1, plus updated ExpressVPN for macOS to the latest version showing, 11.61.1. Sadly, in testing these I still cannot receive numerous texts in Apple’s Messages app, either from unknowns or even active conversations (all such messages come through on my iPhone, iPad and Watch). 

Same as when this originally started with the rollout of Sequoia. Once again, I have had to revert to using the IKE protocol in ExpressVPN in order to use Messages and sometimes connect to mail servers. Of course, I then lose the several nice features normally offered in ExpressVPN.

This resolved for VyprVPN as well. Wireguard prevented Messages from flowing, changing to IKEv2 fixed it.

I reported to ExpressVPN support that the new version 11.61.1 didn't solve the problem, but they did then tell me about a new somewhat hidden feature in the new version under General that says "Allow Apple Services to bypass the VPN", which I have now turned on. Overnight I still had Messages blocked, but after a restart this morning they did show up. Can't say yet that the problem is fixed with this release of ExpressVPN and Sequoia 15.0.1, but will try it today to see. It does look like it requires a reboot of the Mac to get things corrected though.

I saw that ExpressVPN had released an update for their Mac app v11.60.0. Updated it yesterday and it seemed to work on the Automatic protocol setting again, along with the Advanced Protection settings. Sadly, today it went back to the known issue. Messages that come in on the iPhone, or are sent from the iPhone, do not show up on the mac.

Had to go back to the IKEv2 protocol to get things to sync again. Really sad this hasn't been resolved. In my situation, there is no option about using a VPN. It's a hard, cold requirement.

I've made no changes other than updating to 15.1 yesterday and guess what? Everything is now working over PIA again. Upgrading the OS corrected the problem. No changes to PIA. Cheers.