@eskimo We managed to solve this issue. Looks like a bug on Xcode 15+ The simplest solution is to change the productType of your Network Extension target from com.apple.product-type.tv-app-extension to com.apple.product-type.app-extension. Details can be found here: https://medium.com/@munibsiddiqui/fix-nsextensionprincipalclass-packettunnelprovider-must-implement-at-least-one-public-55963b76c9cd

@eskimo We managed to solve this issue. Looks like a bug on xcode 15+ The simplest solution is to change the productType of your Network Extension target from com.apple.product-type.tv-app-extension to com.apple.product-type.app-extension. Details can be found here: https://medium.com/@munibsiddiqui/fix-nsextensionprincipalclass-packettunnelprovider-must-implement-at-least-one-public-55963b76c9cd

@eskimo The user should be able to block a particular domain , Yes, prevent users from loading example.com in Safari/chrome/Brave or through some other application.

@eskimo I believe it supports both, as I have successfully made the connection with IKEv2 native protocol using NEVPNManager. @HusseinKandil you can figure out whats failing from console logs. Simple filter out the logs with process nesessionmanager.