Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Prerequisites for Using SCP in macOS Sonoma

  1. Last updated
  2. Save as PDF

Network Requirements

Client Proxy is supported only in IPv4 capable networks.

Validated Client Proxy Versions

  • SCP 4.8
  • SCP 4.7

IPv6 Traffic Behavior in Sonoma

Client Proxy does not support IPv6, but with earlier macOS versions it worked fine because earlier macOS versions allowed fallback to IPv4 if IPv6 was blocked. In macOS Sonoma, a change in behavior with respect to IPv6 has been observed & where the traffic does not fall back to IPv4 if IPv6 is blocked.

Client Proxy works on Sonoma when IPv6 is disabled. You can disable IPv6 manually and through MDM.

Disable IPv6 on Sonoma

You can disable IPv6 on Sonoma manually using system settings or by using a command in the terminal.

Disable IPv6 Manually

You can disable IPv6 manually in your network settings. Follow the steps given below to disable IPv6 on Sonoma.

  1. Go to System Settings > Network.
  2. Click Details.
  3. Click the TCP/IP tab.
  4. Scroll down the cursor, select the Configure IPv6 drop-down menu, and set it to Off. 
  5. Click OK.
  6. Restart your system to make sure IPv6 is disabled.

Disable IPv6 Using Terminal

  • If the IPv6 turnoff option is not available in the network settings, open the terminal and disable IPv6 using the command.
  • In the terminal, enter the following command to get all the network interfaces and their names. 

sudo networksetup -listallnetworkservices


NOTE: IPv6 should be disabled for all possible active network interfaces. It may not be just Ethernet; it could be WiFi as well.

 

  • Identify the network interface you are using, most commonly Ethernet or Wi-Fi. Use -setv6off to disable the IPv6 from all the active network interfaces. For example, check these commands to disable IPv6 in Ethernet, Wi-Fi, Thunderbolt Bridge, and iPhone USB.
  • To disable IPv6 on Ethernet, use the command sudo networksetup-setv6off "Ethernet".
  • To disable IPv6 on WiFI, use the command sudo networksetup -setv6off "Wi-Fi".
  • To disable IPv6 on Thunderbolt Bridge, use the commandsudo networksetup -setv6off "Thunderbolt Bridge".
  • To disable IPv6 on iPhone USB, use the commandsudo networksetup -setv6Off "iphone USB".
  • You will be prompted to enter your OS X administrator password. Afterward, IPv6 will be disabled. 

Disable IPv6 Using Jamf

If you want to disable IPv6 at multiple endpoints, you can disable it using a third-party MDM such as Jamf. Follow the below steps to disable IPv6 in macOS Sonoma.

  1. Create a new profile on Jamf Pro to disable IPv6. 
  2. In Jamf Pro, go to Policies > Files and Processes.
  3. In the Execute command  tab, enter the command  - networksetup -setv6off “ Wi-Fi “

MicrosoftTeams-image (24).png 

  1. Check for the connection type using the command - networksetup -listallnetworkservices and configure the appropriate connection type on the Jamf Execute Command field.
  2. Push the policy to the mac or assign the policy to the self service to disable the IPv6.

 

  1. Back to top
  • Was this article helpful?

Recommended articles

  1. Article type
    Topic
  2. Tags
    This page has no tags.