Applies To:
Show Versions
BIG-IP APM
- 17.1.0, 17.0.0, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0
Updated Date: 01/22/2024
Summary:
Summary
BIG-IP Edge Client establishes secure communications to applications and networks. It provides users with full access to IP-based applications, resources, and intranet files as if they were physically working on the office network. This release note contains information about the changes made for the current version only. Refer to the prior release note versions for additional information.
The Edge Client version 7.2.4.1 is now available on downloads.my.f5.com (under the APM Clients container). For download instructions, refer to the K000090258: Download F5 products from MyF5 article.
The following table contains APM client 7.2.4.1 versions for different operating systems:
Contents:
User documentation for this release
For a comprehensive list of documentation that is relevant to this release, refer to the following pages:
Features and enhancements
- Support for Browser Based VPN Clients running on Linux AArch64 with UOS and Ubuntu Operating Systems
-
With this release, F5 supports Linux browser-based web F5 VPN on AArch64 with Unity Operating System (UOS) and Ubuntu operating systems. However, the support for Edge Client installation package creation for AArch64 BIG-IP is available in the BIG-IP version 17.1.0 or higher releases. If you are using the BIG-IP version lower than 17.1.0, follow the below steps to produce a Linux installer package and distribute it to users using any internal file distribution portals or email.
Perform the following steps to install the linux_f5vpn.aarch64.deb package from the BIG-IP:
- Upload and install the APM 7241 GA build on the BIG-IP server.
- Secure Shell (SSH) to BIG-IP server through root credentials.
- Copy the file from the /var/apm/mount/apmclients-7241.2023.331.1108-6203.0.iso/sam/www/webtop/public/download/linux_f5vpn.aarch64.deb location to a server where users can download it.
- Use the command sudo dpkg -i linux_f5vpn.aarch64.deband install the package on the UOS or Ubuntu machine.
Note: If you are using Ubuntu then you need to install the package, refer to the workaround specified in the 1239253-1 bug.
Fixes
The following issues have been fixed in this release.
| ID Number | Description |
|---|---|
| 1081133-1 1226433-1 |
Fixed the issue where endpoint inspection did not follow the best practices. |
| 1189457-6 | Modified Edge Client to allow only HTTPS connections to APM virtual servers. F5 discourages using HTTP connections. If you need support for HTTP connections, refer to the workaround specified in the K000134621 article. |
| 1189465-6 | Modified Edge Client to restrict HTTPS connections to virtual servers with SSL certificate warnings. If you want to switch to the old behaviour where Edge Client displays the warning but allows the user to continue the connection, refer to the K000133271 article for more information. |
| 1212669-2 | Fixed the issue where Edge Client crashed when executing the login script and also when changing virtual servers. |
| 1251445-1 | Fixed the issue where the Edge Client fails to download the merged PAC file for third-party applications when the host: string in the HTTP header request is used. |
Known issues
The following are known issues in this release.
| ID Number | Description |
|---|---|
| 1072901 | The Windows logon integration does not work with TLS 1.3 on windows 10 and Windows 11. Workaround: Enable other versions of TLS to allow Windows Logon client to fallback to an older version of TLS protocol. |
| 1079621 | When the application is moved to the trash, the respective application F5 EPI or F5 VPN directory is getting deleted from the following path: /Applications/F5 Endpoint Inspector.app/Contents/Resources/ Whereas, the respective application specific (F5 EPI or F5 VPN) folder is not getting deleted from the following path: /Users/<username>/Library/Applications Support/F5 EPI The plist file of the respective application is not deleted from the following path: /Users/<username>/Library/Launchagents/ Workaround:
|
| 1082821 | When trying to establish a VPN connection using a browser, it does not work with TLS 1.3 on all versions of macOS. Workaround: Enable other versions of TLS to allow the browser to fallback to any other versions of TLS protocol. |
| 1082825 | When trying to establish a VPN connection using a browser, it does not work with TLS 1.3 on Linux. Workaround: Enable other versions of TLS to allow the browser to fallback to any other versions of TLS protocol. |
| 1082909 | When trying to establish a VPN connection, it does not work with TLS 1.3 on Windows 11. Workaround: Enable other versions of TLS to allow APM client to fallback to any other versions of TLS protocol. |
| 1083397 | Installation of the Edge Client versions prior to 7.2.2 may be successful on the ARM64-based Windows 10 and Windows 11 but fails to establish the VPN connection. Workaround: Uninstall the prior versions of Edge Client 7.2.2 and install the ARM64-supported Edge Client version using the MSI installer package. |
| 1084369 | Optimized tunnels are not supported on ARM64-based Windows 10 and Windows 11 systems. When Optimized tunnels are used, the tunnel connection fails without user notification. Workaround: In some cases, use a static app tunnel to establish a tunnel connection. |
| 1194381 | An intermittent issue is observed when Edge Client on Windows fails to reconnect if the LAN cable is unplugged when the system is asleep. Workaround 1: Add the Virtual Server FQDN to the stonewall exclusion list on BIG-IP. Workaround 2: The LAN cable should be unplugged from the Windows system prior to hibernation if the user does not want to continue with LAN connectivity after coming out of hibernation. Workaround 3: If step 1 is missed or skipped, and faces the Edge Client reconnect issue after coming out of hibernation then the Ethernet cable must be plugged into the Ethernet port on the Windows system. If there is no Ethernet cable, restart the Edge Client application. |
| 1239253-1 | Web F5 VPN will not be launched if certain versions of Ubuntu on ARM64 do not have the /lib/aarch64-linux-gnu/libpcre16.so.3 library installed. Workaround: Users who want to use web F5 VPN on certain versions of Ubuntu running on ARM64 which do not have /lib/aarch64-linux-gnu/libpcre16.so.3 should install libpcre16-3 using one of the following commands. sudo apt install libpcre16-3 or sudo apt-get install libpcre16-3 |
| 1269721-1 | Edge Client fails to run endpoint inspection on devices installing MacOS Ventura 13.3 or later. For more information, refer to the K000132932 article. Workaround: Use the browser-based VPN. Note: There are some limitations if you are using the VPN in both AutoConnect mode and Blocked mode which means the system cannot access the external network until you are disconnected. |
Contacting F5
| North America | 1-888-882-7535 or (206) 272-6500 |
| Outside North America, Universal Toll-Free | +800 11 ASK 4 F5 or (800 11275 435) |
| Additional phone numbers | Regional Offices |
| Web | http://www.f5.com |
| support@f5.com |
Additional resources
You can find additional support resources and technical documentation through a variety of sources.
| F5 Support | Free self-service tools give you 24x7 access to a wealth of knowledge and technical support. Whether it is providing quick answers to questions, training your staff, or handling entire implementations from design to deployment, F5 services teams are ready to ensure that you get the most from your F5 technology. |
| MyF5 | The storehouse for thousands of knowledgebase articles that help you manage your F5 products more effectively. Whether you want to browse periodically to research a solution, or you need the most recent news about your F5 products, MyF5 is your source. |
| BIG-IP iHealth Diagnostics and BIG-IP iHealth Viewer | BIG-IP iHealth Diagnostics identifies issues, including common configuration problems and known software issues. It also provides solutions and links to more information. With BIG-IP iHealth Viewer, you can see the status of your system at-a-glance, drill down for details, and view your network configuration. |
| F5 DevCentral | Collaborate and share innovations including code samples, new techniques, and other tips, with more than 300,000 F5 users worldwide. DevCentral is the place to ask questions, find solutions, learn to harness the power of F5’s powerful scripting language, iRules, and much more. |
| Communications Preference Center | Here, you can subscribe to a number of communications from F5. For information about the types of notifications F5 provides, see K9970: Subscribing to email notifications regarding F5 products. |
