MacOS – VPN client is not working after Yosemite update: Enforce Firewall Policy Fail

macosvpn

I use both the Apple VPN client (L2TP over IPSec in Network preferences) and Checkpoint Endpoint Security client to connect to work.

I installed Yosemite last night and today I can not connect to work using VPN. It connects to the server but fails.

The Checkpoint software gives a bit more feedback: "Connection Failed: Enforce Firewall Policy failed". This occurs after authentication of my username/password.

Both clients work fine on my MacBook which still has Mavericks.

Suggestions?

Mac mini, OS X Yosemite (10.10)

Best Answer

I think the unerlying issue is that Yosemite will not load kext (kernel extensions) unless they are signed by an authorized kernel extension developer. However in 10.8 and earlier, kexts could not be signed and signed kexts for 10.9+ will not load in <10.9.

I experienced the same issue loading unsigned tuntaposx for the vpnc cisco client.

You can override this behavior and allow the cpfw.kext to load in Yosemite by putting your computer into kext developer mode. This essentially reverts to the 10.9 behavior by allowing unsigned kexts to load.

sudo nvram boot-args="kext-dev-mode=1"

Now reboot and your kext should load.

You can revert by doing this:

sudo nvram -d boot-args