WatchGuard Support Center

Knowledge Base - Article

 macOS High Sierra requires kernel extension for Mobile VPN with IPSec client

Why does an error message appear when I install the WatchGuard Mobile VPN IPSec client in macOS?

If you install the WatchGuard Mobile VPN IPSec client on a computer with macOS High Sierra 10.13 or later, the IPSec client might fail to launch, and this error message appears: The VPN services are not running.

This occurs because macOS does not enable third-party kernel extensions by default. For increased security, a user must manually approve these extensions.

To allow the WatchGuard IPSec Mobile VPN Client to load:

  1. In macOS, select System Preferences > Security & Privacy > General.
  2. Find this message: System message from developer "WatchGuard Technologies, Inc" was blocked from loading.
  3. Next to that message, click Allow.
To learn more about this issue, see in the Apple documentation.