When setting up a new VPN in System Preferences > Network, in the Advanced page you can select a checkbox to

Send all traffic over VPN connection

It is disabled by default.

What traffic would not be sent over the VPN if it were left disabled?

1 Answer 1


When you connect to a VPN, you usually only get access to a subnet (host to network). This depends on the VPN technology and configuration used, of course, but it's one of the setups you see most often.

By enabling this checkbox, your Mac tries to route all traffic through the VPN, even traffic that would otherwise be sent to your local gateway (host to everywhere). This is useful if you want all your browsing and other network traffic to be routed through the VPN. You may want to this for example to pretend you're at a different location or because your company has a trusted internet connection and you're sitting in a suspicious internet cafe.

  • So in the checkbox-disabled case, you get access to machines on the VPN's network, and the VPN is only used to access those machines? When accessing the rest of the internet, your normal connection is used?
    – minseong
    Dec 16, 2021 at 14:23
  • Yes, that's correct. The exception being when you're connected to a VPN that is already in host-to-everywhere mode due to the VPN configuration (either the one you set up or the one pushed by the server, if the protocol supports it). In that case, all traffic goes via VPN by default, even if the checkbox is disabled.
    – DarkDust
    Dec 16, 2021 at 14:33

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .