4 min read
The symptom is familiar: the client says "connected" but nothing loads, or the connection comes up and dies a few seconds later. The reason is that security software operates at the same level as a VPN — it intercepts network traffic. Two interceptors on one device conflict, and the winner usually isn't the one you wanted. Here's how to identify which program is interfering in about five minutes, and what to change without switching protection off for good.
| What | How it interferes | Sign | |---|---|---| | Antivirus with encrypted-connection scanning | opens TLS for inspection, breaking protocol masking | connection dies seconds after establishing | | The system firewall | won't pass traffic from the virtual adapter | "connected" but no page loads | | A second VPN client | takes the system tunnel for itself | one client connects, the other drops instantly | | A corporate security agent | forces traffic down its own rules | fails on the work laptop, works on a personal one | | Parental controls or content blockers | filters DNS and addresses | works selectively, some sites unavailable |
The first row is both the most common and the least obvious. Encrypted-connection inspection — variously called HTTPS scanning, SSL inspection or web protection — substitutes certificates so it can look inside. For a masking protocol that's fatal: the handshake stops matching what's expected and the tunnel breaks.
Note: switching off your antivirus is a two-minute diagnostic step, not a solution. Leaving a machine unprotected so a tunnel works is a bad trade.
In the antivirus:
In the Windows firewall:
In the system:
If the device was issued by your employer, it almost certainly runs a management agent that you can't disable and shouldn't try to. That isn't a malfunction, it's policy — and working around it means breaking company rules. More on that scenario: why your VPN doesn't work at the office.
If nothing changes after all these settings, look elsewhere:
The VLESS protocol with Reality masking looks like an ordinary HTTPS session, so most security software doesn't find it suspicious in itself — conflicts arise mainly where encrypted-connection scanning is enabled, and one setting resolves them. There's one app across the Apple line and separate builds for Android, Android TV and Windows, so you don't end up keeping several different clients — which removes the most common cause of conflict, two clients fighting over the system tunnel.
Do I have to disable my antivirus for a VPN to work? No. Disabling is only a two-minute diagnostic step. The fix is turning off encrypted-connection scanning and adding the client to exclusions.
Why does it say "connected" with no internet? Most often the firewall isn't passing traffic from the virtual adapter. Allow the app on private and public networks.
Can I run two VPNs at once? One system tunnel is active per device. A second client will keep seizing it, and both will behave erratically.
Does Windows Defender interfere? The antivirus itself usually doesn't; its firewall does, if there's no allow rule for the client.
Why does it work on my phone but not my computer? Computers run more traffic-intercepting software: antivirus, firewall, corporate agents, leftovers from old VPN clients. Start by auditing the installed VPN list.
An honest guide to VPN on a router: why VLESS+Reality won't run on stock firmware and why BessyConnect apps are simpler and safer for the whole home. More
How to set up a VPN on Android with BessyConnect: install from Google Play, sign in, allow the VPN connection, pick a server country and enable always-on VPN. More
PlayStation and Xbox have no VPN app of their own. You can still connect a console two ways — via a router or by sharing a PC with BessyConnect. More
