macOS 15 built-in network security features taking precedence over Network Access, Security and Content Controls

This will be fixed in the macOS 15.1 release

The impact of this issue is for macOS 15 devices who have both iCloud Private Relay and Network Firewall enabled, and using the Jamf Security Cloud portal or the Jamf Safe Internet portal.

The investigation revealed that the issue is caused by an update to the macOS Firewall introduced in macOS 15. We have notified Apple of the situation and are awaiting their response.

Based on new information, we have identified an additional workaround to resolve the issue on affected devices. The Firewall can be disabled either through System Preferences > Network > Firewall or via MDM.

We are continuing to investigate this issue.

We are actively investigating this issue. Due to iCloud Private Relay taking precedence over Jamf's Security Cloud capabilities, resources that are only accessible via Network access may not be reachable in Safari. This may also negatively impact the enforcement of Security policies and Content controls.

Here are identified workarounds for IT administrators:
-Disable the firewall via Jamf Pro - If you use an alternative MDM, please consult their documentation to disable the firewall.
-Disabling iCloud Private Relay via Jamf Pro - If you use an alternative MDM, please consult their documentation to disable iCloud Private Relay.
-In Jamf Security Cloud, navigate to Settings → Notifications → Block Pages, and select the “Block iCloud Private Relay" option, which will notify users with a pop-up to disable iCloud Private Relay to restore Internet connectivity.

Alternatively there are actions your End Users can take:
-Turn off the Firewall in macOS 15.
-Use an alternative browser to Safari.
-Turn off iCloud Private Relay on macOS 15