LockDown Browser + VPN on Mac (Detection + Disconnect Procedure)

LockDown Browser's relationship with VPNs is mixed: corporate VPNs frequently block Respondus endpoints, consumer VPN IP ranges are flagged by Respondus anti-fraud, and Tor is universally blocked. Disconnect VPN before LDB launch unless your university requires it for LMS access - in which case ask IT for split-tunnel routing.

The symptom

Error -7 (network failure) at exam launch. "Configuration Failed" during install. LDB reachable but slow. "Suspicious IP detected" from Respondus anti-fraud (rare but documented).

Why it conflicts with LDB

VPNs change your apparent network identity. From Respondus's server-side perspective:

The fix - pre-exam procedure

  1. Identify your VPN type:
    • Corporate (Cisco AnyConnect, GlobalProtect, FortiClient): IT-managed
    • University (similar tools, university-managed): may be required for LMS access
    • Consumer (NordVPN, ExpressVPN, etc.): you installed it
  2. Disconnect the VPN before LDB launch. Open the VPN client, click Disconnect.
  3. Verify by browsing to your LMS and to respondus.com. Both should load.
  4. Launch LDB.
  5. Reconnect VPN after exam if you need it.

Alternative configurations

If your university VPN is required to access the LMS:

  1. Contact your university IT and request that Respondus's endpoints (*.respondus.com, updates.respondus.com, config.respondus.com) be added to the VPN's split-tunnel allow-list.
  2. Most enterprise VPN products support split-tunneling; the IT desk can configure Respondus traffic to bypass the VPN tunnel.
  3. If split-tunneling isn't available, ask IT to provide a documented procedure for taking proctored exams - most have one (e.g., "use cellular hotspot for proctored exams, university VPN otherwise").

For consumer VPNs that are flagged by anti-fraud, switch to a different VPN provider or disconnect entirely.

What NOT to do

Frequently asked questions

Will using a VPN look suspicious to my instructor?

Not directly - the instructor sees the recording, not network metadata. But the LDB launch might fail, which is logged. If it succeeds, no flag.

Can I use Cloudflare WARP or 1.1.1.1 for Families during exams?

Cloudflare WARP is a "VPN-like" service. WARP+'s commercial IPs are known to Respondus and usually pass; the free WARP varies. Test with a practice exam first.

What about a VPN to bypass geo-blocking on my LMS?

If you're abroad and your LMS is geo-restricted to your home country, the VPN is required for legitimate reasons. Use the IT split-tunnel approach - separate Respondus traffic from VPN.