Client disconnects VPN when changing networks on macOS since 1.6.0

[federicochiesa]

As the title says, when the VPN management was not delegated to macOS I could unplug from the wired network at my desk and connect to WiFi and the VPN would keep working. Now, if I do the same thing the VPN connection drops and I have to reauthenticate.

Is this intended behaviour or is it a bug? It was handy to be able to keep the VPN alive while going from wired to wifi and vice versa.

[kchudy]

@moubctez Please try to replicate the issue

[moubctez]

I can't reproduce this with my setup. @federicochiesa Is your wired network different from the wireless one, or are these on the same IP network? Please note that the VPN will be disconnected when the wired network adapter (for example, an USB dongle) gets disconnected. Otherwise, VPN should be kept alive (for a certain amount of time) when a network interface is put down.

[federicochiesa]

Hi, the wired network is the same as the wireless one, but the computer is connected to the wired network with a USB C dongle, so the network adapter gets disconnected when I go away from my desk.

[federicochiesa]

I also noticed, when this happens the defguard icon on the top bar still shows the green dot and the menu says "Disconnect" as if it's still connected, but when I open the client the VPN is disconnected.

[mitio]

I'm observing something similar that started with 1.6. I'm on 1.6.4 at the moment, on macOS Tahoe (26.2 (25C56)). The client shows the green dot indicating it's conncted, but it's not. When I click "disconnect" from the system menu, it actually connects. This happens after a longer (e.g. overnight or over the weekend) sleep.

Will try to gather some client and server logs the next time it happens.

[mitio]

Okay, happened again after a 2-hour sleep, no change in the wifi network.

The clinet's logs seem truncated, though, nothing beyond this line repeating:

[02/02/2026, 15:36:38][INFO][Client] Automatically retrieved the newest instance configuration from core for 1 instances, sleeping for 30s

The defguard-client.log in Console.app seems to be weeks old, from the update. I can also provide a snippet from wifi.log if needed, just let me know.

Attaching screenshots of the client and system tray icons, incliding the native macOS VPN indicator.

[moubctez]

@mitio Thanks for the details. I've fixed the system tray status. It will be included in Client v1.6.5.

[kchudy]

@moubctez Add scenarios to docs:

• Network interface removed
• Network changed > 3m
• Macos bug (disconnecting all VPNs)