Clash Verge logo Clash VergeOpen-source cross-platform proxy client

Troubleshooting

When Firewalls and Antivirus Block Clash Verge

Published · Updated · 2 min read

It won't launch after installing, TUN crashes instantly, or the installer reports files being deleted mid-run. After port conflicts, security software is the most common cause. The reason isn't mysterious: a proxy client installs a virtual adapter, registers a system service and listens on ports — all three look suspicious to a scanner.

Confirm where the installer came from before whitelisting anything
Confirm where the installer came from before whitelisting anything

Make sure the package is clean first

Verify the source before you add exclusions. Download only from GitHub Releases or the direct links on this site, and check the file name and size match — the checklist is in spotting the official installer. Whitelisting an exe of unknown origin is opening the door yourself.

SponsoredWhere does the subscription link come from?Our partner provider gives you 1 GB of high-speed Hong Kong data at signup — import it in one click.Get high-speed nodes

The SmartScreen prompt

"Windows protected your PC" appears because the installer has no commercial signing certificate. It is not a malware detection. Click "More info → Run anyway"; the full walkthrough is in installing on Windows.

Antivirus false positives

Exclude the whole install directory rather than a single exe — the core process and the virtual adapter driver get scanned separately. In Defender the path is Windows Security → Virus & threat protection → Manage settings → Add an exclusion → Folder. Other suites have an equivalent trusted-folder list in their protection settings.

Firewall specifics

  • Tick "Private networks" on the first firewall prompt. Get it wrong and LAN devices can't reach you — see LAN sharing;
  • If you clicked Cancel, fix it under Control Panel → Windows Defender Firewall → Allow an app;
  • TUN depends on the service component, and a service that won't install is usually being blocked too. See fixing service mode.
Tip

Corporate EDR agents typically expose no user-facing whitelist at all. If you can't change it, don't fight TUN — system proxy mode gets you online just as well.

Don't have Clash Verge yet?

Windows 64-bit installer · v2.5.1 · free & open source

Download v2.5.1