Thanks for reaching out with your message! I’ve merged your prior comment back to your original thread for clarity purposes.
And, in the future, for us to be able to better assist you, can we kindly ask that you submit a proper support ticket by filling out the questionnaire using the below link? Please select the option that best matches your specific issue type instead of simply selecting “other”, as this form was created to help diagnose issues while gathering information and it will allow the support team to be able to best assist with your specific issue type.
Thank you!
Based on your admin, we see multiple macOS remotes - which device are you having issues with specifically?
With that, are you running any third-party security software on your issue Mac? If you temporarily disable your mac firewall, do issues still occur?
Let’s also refresh the RAATServer on your issue Mac. You can generate a new RAATServer instance on your device by following these instructions, but please be aware that this will reset your Roon Settings → Audio Tab to factory settings and I would advise making a backup of any custom DSP settings you have:
I tried going through the questionnaire a few times but I found it difficult to find appropriate options. I thought I’d have a chance to see the ticket before it was submitted. Sorry about that!
Which device - I am not sure how to describe it or what list you see, it is a Macbook Pro 16 inch 2023 with serial number ending in DN.
This is a company device and I am not sure what software is on there unfortunately. As far as I am aware nothing new has been installed recently since it last worked a few weeks back. The built-in firewall is turned off and I disabled my unifi firewall to ensure that wasn’t the issue.
I have just tried renaming that folder and unfortunately issue persists.
Hi @Kam_M_Kyrala,
Thanks for getting in touch. Unfortunately, since you’re using a computer provided by your employer, that could very well be the root of the issue—especially if your other endpoints aren’t experiencing the same behavior. It’s common for company-managed devices to have strict network or security policies in place that can interfere with Roon’s communication.
Would you be able to check with your IT department to see if there are any firewall rules, VPNs, or other restrictions in place that might be affecting network discovery or traffic? That’ll help us better understand if the device is the limiting factor here. Let us know what you find!
First, verify that Roon has local network access from MacOS itself. Navigate to Privacy & Security → Local Network and verify Roon is toggled on.
Roon relies on multicast, unicast, and broadcast traffic for device announcements and pairing. Within this, port assignment is dynamic across processes, although Airplay and other protocols use the same consistent ranges. If you’re not having issues with metadata, artwork, or authorizations, then the firewall isn’t restricting upstream access and Roon’s own servers aren’t restricted.
The MacBook will need to be able to receive device announcements and initiate TCP pairing with local devices. These functions won’t be inherently limited, but if you have any sort of company firewall or VPN, you’ll need to inquire with your employer whether it restricts those functions.
So I tried opening roon and then looked at the following log
log show --last 1m | grep -i roon
And saw that crowdstrike is blocking roon:
kernel: cfil_hash_entry_log:6088 <CFIL: RECEIVED CFM_OP_DROP>: [10217 Roon] <UDP(17) in so 6605f6e182e9d1b5 16797614684397856 16797614684397856 age 0> lport 9003 fport 50146 laddr 239.255.90.90 faddr 192.168.86.112 hash 70566120
Unfortunately this isn’t something my IT shop can help with. Crowdstrike is an industry standard tool that many companies use, and it seems to not be aware of Roon and thinks it is a threat. It may be related to the other issues you all are seeing on this. If possible it would be great for you all to work with crowdstrike to whitelist your application, since this will likely effect more and more people. As it is today this greatly reduces my usage of Roon
Hi @Kam_M_Kyrala,
Thanks for your patience. Just a heads-up—CrowdStrike only accepts false positive reports directly from their own customers or software vendors. That means your employer would need to reach out to CrowdStrike support to request a whitelist for Roon.
Let us know if there’s anything else we can do to assist in the meantime!
That’s unfortunate, my company will not do that. If you are unable to work with them it looks like I’ll need to find a replacement for Roon. This can be closed.
Hi @Kam_M_Kyrala,
If this is the only thing standing in the way of enjoying Roon, it might be worth trying to set up Roon Server on a personal computer at home. You can then use Roon ARC at work to stream from your home server. It’s a great workaround if your work machine is locked down due to security policies.
Let us know if you’d like help getting that set up!
I use a lot of personal applications, video games, steaming, all work fine without block. I can connect to the roon server, and I am not blocked from roon websites. This is the only application falsely identified as a threat and I’m sure you’re going to have more customers with this issue.
If Roon ARC worked in MacOS that would be fine, but you do not have an app for that. I have desktop speakers and they have one USB input. I want to be able to use the speakers for music and for conference calls. Roon ARC or roon proper would allow that, but playing from another device like my phone will not work.
Hi @Kam_M_Kyrala,
Thank you for taking the time to explain your situation. I completely understand that ARC isn’t the right fit for your use case. As requested, I’ll go ahead and close this thread. If anything changes or you have further questions down the line, please don’t hesitate to reach out. We’re always here to help.