If you're still getting the "Do you want the application “Vienna Ensemble Pro Server (64-bit).app” to accept incoming network connections?" when opening VEP and you want to get rid of it, I have a solution.

There have been posts before but I didn't see where everyone seemed to take note of it.

If this is still as issue let me know and I'll post the answer. (I just want to be carefull because it involves replacing the exsisting (code) signature for the Application Firewall. It's not a big deal. It worked perfectly for me. I no longer get that message and VEP works fine.

Steve

Here my fix..

I hesitated at first to post this because I was not sure if Vienna Ensemble Pro Server needed to allow incoming connections from a VSL or eLicenser server, or potentially a slave computer. The VEP manual lists used network ports as 6472, 6473, 6474, 6475, 6476, 6477. That’s VERY helpful actually. But I saw via Little Snitch that it was also trying to connect via port 80. Has this been taken in to account for? I don’t know. But thinking about this actually led me to this solution. There are probably a few ways to go about this. I have two. One is the shotgun approach and requires a little clean up work. The other is precise although I didn’t actually try it yet but seeing how it’s potentially safer I’m going to (I’m sure it will work - you can find it in the middle of Step Two). . Both require the app Little Snitch which might have a downloadable demo (or you can do this part in the Terminal if you know how, I currently don’t).

This may not be perfect but it seems harmless and it worked for me. I see no reason it won’t work for everyone. It occurred to me that if Little Snitch can control incoming and outgoing network connections, and port and protocol assignments, it might just be able to “patch” this issue.

I use Vienna Ensemble Pro Server (64-bit) throughout this but it goes for either the 32-bit or 64-bit server apps.

Step one:

A previous post recommended to check the apps code signing status.

https://www.vsl.co.at/community/posts/t32838-incoming-network-connections#post207269

Open Terminal. We’re going to do some copying and pasting.

Before you do this PLEASE look at the commands closely. Notice the path to Vienna Ensemble Pro Server (64-bit) is in my Applications folder in the Vienna Ensemble Pro folder. If yours is too, you can copy and paste the commands below exactly as they are. If you keep VEP somewhere else, you need to either type in the path or drag the Vienna Ensemble Pro Server (64-bit) app into the Terminal after entering <codesign -vvv "> which will enter the path for you, then put a close quote at the very end.

codesign -vvv "/Applications/Vienna Ensemble Pro/Vienna Ensemble Pro Server (64-bit).app"

If it returns "code or signature modified" something has indeed gone wrong so go ahead and enter..

sudo codesign --force --sign - /Applications/Vienna\ Ensemble\ Pro/Vienna\ Ensemble\ Pro\ Server\ \(64-bit\).app

It should return.. "valid on disk" and "satisfies its Designated Requirement"

You’ve just given it a valid code signature. But that’s not enough. Time for surgery.

Step two:

Ok, now you'll need Little Snitch (or know the commands that change Servers, Ports and Protocols that applications use, which like I said before, I currently don't). And again, Little Snitch might have a demo mode, I'm not sure. I've owned it for so long I can't remember. It's a great app to own anyway, although until you set up all of the rules, it might get on your nerves a bit. Also, there should be several other utilities that can do what we’re about to do.

You can find Little Snitch at: https://www.obdev.at/products/index.html

Quit all running applications. Open Little Snitch. In the Little Snitch Configuration window see if Vienna Ensemble Pro Server (64-bit) is listed in the main window area. It probably won’t be, but if it is, select it and right-click or control-click and choose Edit Rule...

If you just installed Little Snitch and haven't opened VEP yet it won't be in the main window. So, from the Little Snitch Configuration window click New in the task bar. From Process, click the folder icon and select Choose Application. Dig through your Finder into the Apps folder and the Vienna Ensemble Pro 5 folder and select Vienna Ensemble Pro Server (64-bit).

Then enter this information… (This may take some trial and error but if you want to try the “precise” approach, create a setting in Little Snitch that allows Vienna Ensemble Pro Server (64-bit) to use port 80 as one of the port numbers allowed in Little Snitch’s main window. If you try this method, you can skip Step Three. If there’s still an issue after trying this method and you've done it right, then more investigation is needed).

Allow Connections

Process Owner: Me

Server: Any Server

Port: any

Protocol: any

Enabled: Checked

Click Ok.

Step three:

Open System Preferences. (I'm running 10.9.5, and these steps could be slightly different depending on which OS you're on). Click on Security & Privacy. Unlock the lock, enter you user password and Click on the Firewall tab. Open Firewall Options...

Make sure "Automatically allow signed software to receive incoming connections" is checked.

Take a screen capture or make a list of every app or process listed (You might need this later to add them back manually if needed or wanted). Select every app or process listed in the window and delete. Shift-click and you can select them all at the same time, then click the minus button. Click Ok. Lock the lock. Restart you Mac.

Step four:

Launch Vienna Ensemble Pro Server (64-bit)

Did it work? It did for me. If the “Allow incoming..” dialog box did appear click Accept, then quit VEP and restart you Mac. When it restarts, first thing go to the Firewall prefs and see if Vienna Ensemble Pro Server (64-bit) is now in the window and is Allowing Incoming Connections. Now, launch Vienna Ensemble Pro Server (64-bit) again. If no message, it worked. Restart your Mac and try again.

If somehow you've come to the end of this feeling like you've destroyed your Vienna Ensemble Pro Server (64-bit) app, just either reinstall VEP from your last install package if you want (you could just trash the Vienna Ensemble Pro Server (64-bit) app and then run the installer for a minimally intrusive installation. Download VEP from your account, or use the uninstaller and then reinstall.

Hope this helps someone.

Steve

Originally Posted by: dbudde

This worked for me.  I also uninstalled little snitch after going through this process but left the rules in place (the uninstaller allows you to choose this or not).  And it still works.  So you only need little snitch to set up the rules.

Little snitch demo runs for three hours as many times as you want for up to 30 days.

Thanks.

Glad it worked. Thanks for reporting that the uninstaller gave you a choice to keep the rules intact (in this case for the server, port and protocol assigments) when uninstalling. I hadn't really thought about that because I've never uninstalled it. That was a nice gesture on the developers part though, even if it was just for troubleshooting or whatever.  

I thought more people would reply on this one. But I'm just happy to have thought about it and to have shared it.

Considering the way you did it, I could leave much shorter instructions. But because it involves opening ports I thought a little background was a good idea. Although I don't think opening the ports for Vienna Ensemble is a big deal. In fact, I think it's the solution.

Steve