Release Notes : APM Client 7.2.1.2

Applies To:

Show Versions Show Versions
Release Notes
Updated Date: 05/31/2022

Summary:

BIG-IP Edge Client establishes secure communications to applications and networks. It provides users with full access to IP-based applications, resources, and intranet files as if they were physically working on the office network.

The Edge Client version 7.2.1.2 is now available on downloads.f5.com.

Applies To: 13.1.0, 13.1.1, 13.1.3, 13.1.4, 13.1.5, 14.0.0, 14.0.1, 14.1.0, 14.1.2, 14.1.3, 14.1.4, 14.1.5, 15.0.0, 15.0.1, 15.1.0, 15.1.1, 15.1.2, 15.1.3, 15.1.4, 15.1.5, 15.1.6, 16.0.0, 16.0.1, 16.1.0, 16.1.1, 16.1.2, 16.1.3, 17.0.0 

Contents:

User documentation for this release

For a comprehensive list of documentation that is relevant to this release, refer to the following pages:

Features and enhancements

There are no features or enhancements in this release.

Fixes

The following issues have been fixed in this release:

ID Number Description
522555-1 Previously, there were no Network Access settings on the APM to enable/disable NetBIOS over TCP/IP on Windows NA adapters used for VPN tunnels. Administrators can now use the APM Variable Assign agent to enable/disable NetBIOS as per their preference. By default, NetBIOS is enabled.

To disable NetBIOS, add the following entries to the Variable Assign agent in your policy:

  • Custom variable:

    config.connectivity_resource_network_access./Common/<NA_RESOURCE_NAME>.client.IPv6LAN

    <network access resource name> is the name of the network access resource.

  • Custom expression:

    "return {</IPv6LAN><enableNetBios0>0</enableNetBios0><IPv6LAN>}"

To enable NetBIOS, add the following entries to the Variable Assign agent in your policy:

  • Custom variable:

    config.connectivity_resource_network_access./Common/<NA_RESOURCE_NAME>.client.IPv6LAN

    <network access resource name> is the name of the network access resource.

  • Custom expression:

    "return {</IPv6LAN><enableNetBios0>1</enableNetBios0><IPv6LAN>}"

864441-3 This release upgrades OpenSSL to 1.0.2u to integrate the following OpenSSL vulnerability fixes:
928657-1 Fixed the issue where the Edge Client for macOS could not connect to the VPN when the system monitoring applications were running on the system.
942953-4 Fixed the issue on Windows 10, where the user could not type credentials in the Edge Client window. This occurred because when the user pressed the Ctrl key, the client went into press lock mode and did not allow to type the credentials. With this release, skip logic was updated, and this issue is now fixed.
965325-1 Previously, on Windows, when you configured Network Access with DTLS and connected to the VPN using Edge Client, the DTLS performance degraded. This issue had been fixed, and now the DTLS performance is not impacted.
979877-3 The EDITPARTYNAME comparison had been modified for the OpenSSL vulnerability CVE-2020-1971.
981789-1

Fixed the issue where Edge Client and browser stored credentials in plaintext even after the client has disconnected from the VPN.

With this fix, when using SAML authentication, the Edge Client displays an additional certificate selection dialog in the following scenarios:

  • When the IdP is in the trusted servers list and a single user certificate is installed.
  • When the access policy is configured with On-Demand Cert Auth and a single user certificate is installed.
  • When Single Logout is enabled, and if the IdP is not on the trusted list or two or more user certificates are installed, Edge Client displays an additional certificate selection prompt on the disconnect action.
984613-3 Fixed the issue where the Edge Client installer did not follow best practices when installing and upgrading VPN components.
992885-1 Fixed the issue where the DNS queries failed, and the DNS Relay Proxy service caused the following error in the logs:

DNS_RR::read, Bad RRDATA

999317-1 Previously, when the Edge Client was launched as an administrator, running a diagnostics report did not follow best practices. This issue has been fixed.

Known issues

There are no known issues in this release.

Contacting F5

North America 1-888-882-7535 or (206) 272-6500
Outside North America, Universal Toll-Free +800 11 ASK 4 F5 or (800 11275 435)
Additional phone numbers Regional Offices
Web http://www.f5.com
Email support@f5.com

How to Contact F5 Support or the Anti-Fraud SOC

You can contact a Network Support Center as follows:

You can manage service requests and other web-based support online at F5 My Support (registration required). To register email CSP@F5.com with your F5 hardware serial numbers and contact information.

You can contact the Anti-Fraud SOC as follows:

Additional resources

You can find additional support resources and technical documentation through a variety of sources.

F5 Support

https://f5.com/support :: Self-solve Options

Free self-service tools give you 24x7 access to a wealth of knowledge and technical support. Whether it is providing quick answers to questions, training your staff, or handling entire implementations from design to deployment, F5 services teams are ready to ensure that you get the most from your F5 technology.

AskF5 Knowledge Base

https://support.f5.com/csp/home

The storehouse for thousands of knowledgebase articles that help you manage your F5 products more effectively. Whether you want to browse periodically to research a solution, or you need the most recent news about your F5 products, AskF5 is your source.

BIG-IP iHealth Diagnostics and BIG-IP iHealth Viewer

https://f5.com/support/tools/ihealth

BIG-IP iHealth Diagnostics identifies issues, including common configuration problems and known software issues. It also provides solutions and links to more information. With BIG-IP iHealth Viewer, you can see the status of your system at-a-glance, drill down for details, and view your network configuration.

F5 DevCentral

https://devcentral.f5.com/

Collaborate and share innovations including code samples, new techniques, and other tips, with more than 300,000 F5 users worldwide. DevCentral is the place to ask questions, find solutions, learn to harness the power of F5’s powerful scripting language, iRules, and much more.

Communications Preference Center

https://interact.f5.com/F5-Preference-Center.html

Here, you can subscribe to a number of communications from F5. For information about the types of notifications F5 provides, see K9970: Subscribing to email notifications regarding F5 products.