Mac question: VPN will not work unless I "always allow". Why is this necessary?

Mac question: VPN will not work unless I “always allow”. Why is this necessary?