Manual Chapter : APM Client Release Notes 7.2.6.2

APM Client Release Notes 7.2.6.2

BIG-IP Edge Client establishes secure communications to applications and networks. It provides users with full access to IP-based applications, resources, and intranet files as if they were physically working on the office network. This release note contains information about the changes made for the current version only. Refer to the prior release note versions for additional information.

The Edge Client version 7.2.6.2 is now available on MyF5.com (under the APM Clients container). For download instructions, refer to the K000090258: Download F5 products from MyF5 article.

The following table contains APM client 7.2.6.2 versions for different operating systems:

APM Clients version BIG-IP Edge Client Windows version Linux/Mac Client version F5 Access Mac Desktop Version
apmclients-7262.2025.1203.525-7005.0.iso 7262.2025.1203.525 Linux: 7262.0.0.2
MAC: 7262.2025.1120.1
7262.0.1.0

Important:

  • F5 announced the discontinuation of 32-bit Linux support in the APM Edge Client Compatibility matrix. In the next major APM Clients release, F5 will remove 32-bit binaries from client ISO images. For more information, please refer to K000157971: End of technical support for BIG-IP APM network access, VPN Linux 32-bit client OS.
  • Going forward F5 Access for MacOS will be released along with APM Clients releases and introducing changes to deployment workflow and versioning. For more information on this change, please refer to K000152992.

For a comprehensive list of documentation that is relevant to this release, refer to the following pages:

There are no new features in this release.

The following are the fixes in this release:

ID Number Component Description
1972437-1 Windows Web-Client Previously, APM VPN via browser on Windows could fail to connect if Network Adapters were added or removed during Access Policy execution.
This issue is fixed.
2140605-1 Windows Edge Client Previously, the debug information would get logged in case of Machine Certs, Registry Checks, Firewall, Antivirus Checks.
This issue is fixed. Made changes to sanitize log messages related to endpoint inspection.
2119365-1 F5 Access macOS Previously, DNS resolution failed for excluded domain names after the system resumed from sleep. This issue is fixed. F5Access is now setting the correct DNS server for exclude domain names.
2047741-1 Windows Edge Client Starting in Windows Edge Client 7.2.6, the network port icon which was visible in multiple Edge Client windows and as the Edge Client application icon (visible in the Windows start menu) has been replaced with the default F5 icon. It was not possible to change that default F5 icon, even when using customization.
This issue is fixed. Customization now supports replacing F5 icon with network port icon using SHORTCUTICON.
1075857-2 Windows Edge Client Made changes to update the integrity algorithm when connecting to VPN to follow best practices.

Following are the Known Issues.

ID Description
2162765-1 The upload time of 7262 package has increased due to increase in iso size.
2162869 Auto-upgrade of the F5 Component Installer Service will fail unless the system is first upgraded to version 7261. For more information. refer to K000157975.
2144401-1 Auto-upgrade to macOS Edge Client v7262 fails on macOS v14.x or older. Workaround: Upgrade to macOS Edge Client v7251 or later before upgrading to v7262. For more information, refer to K000157976.
1961961-1 The Captive Portal page may fail to load when using the latest JavaScript, as it runs on an embedded browser that does not support the latest JavaScript.
2152489-1 Following the upgrade of the Qt framework from version 5.5.1 to 6.10, the F5VPN and F5 Endpoint Inspector applications require additional system libraries to launch successfully. These dependencies may be present on some Linux desktop distributions but missing on others. Workaround: Install the required system libraries on the Linux operating system before launching F5VPN or F5 Endpoint Inspector. For more information, refer to K000158036
683819-1 When the BIG-IP Edge Client is installed using the command-line interface (CLI) or msiexec, the following config parameters are not installed properly: Exclusion List, Auto Launch, Disconnect VPN Options, DNS Suffixes.

Workarounds: You can use either of the following workarounds:

Using the CLI:
 Use the BIG-IP Edge Client installer to install the client by running the command: bash BIGIPEdgeClient.exe

Using msiexec: For example, for always-connected mode, you must set DISCONNECTEDVPNOPTION, DNSSUFFIXES, STARTAPPWITHWINDOWS, and IP, Stonewall exclusion list.
The command syntax is as follows:
msiexec /i f5fpclients.msi /qn DISCONNECTEDVPNOPTION=<One of NumericValue Provided as below> DNSSUFFIXES=<Will be provided by the user> STARTAPPWITHWINDOWS=<Value 0 or 1> IP0=<Exclusion Domain suffix 1> IP1=<Exclusion Domain suffix 2> IP2=<Exclusion Domain suffix 3> IP3=<Exclusion Domain suffix 4> IP4=<Exclusion Domain suffix 5>  /l*vx log.txt

DISCONNECTEDVPNOPTION has 3 possible values that correspond to the option selected for ‘Traffic flow when the VPN is disconnected’: 0 – Block, 1 – Allow, 2 – Allow only in Enterprise LAN

STARTAPPWITHWINDOWS command-line parameter instructs whether or not to establish a VPN during Windows logon. <IP0, IP1, IP2…IP9> parameters to specify the Stonewall exclusion domain suffixes; you can set up to 9.
Example: command-line parameter instructs whether or not to establish a VPN during Windows logon. <IP0, IP1, IP2…IP9> parameters to specify the Stonewall exclusion domain suffixes; you can set up to 9.
Example: msiexec /i f5fpclients.msi /qn DISCONNECTEDVPNOPTION=2 DNSSUFFIXES=example.com STARTAPPWITHWINDOWS=1 IP0=vpn.example.com  /l*vx msiInstallerLog.txt
Note: Make sure to uninstall all BIG-IP Edge Client-installed components prior to installing the edge-client .msi package. Otherwise, you might encounter errors related to installation privileges.
For more information, refer to K13710
2058813-1 Fixed the issue where manual installation of EC726 fails on Windows Edge Client when 725x is already installed.
750648-1 Additional icon appears on the Windows “Network sign-in” logon screen.
Workaround 1:
- Delete the existing dialup adapter before installing new Edge Client.
- Generate new Edge Client package with ‘Phonebook Entry Name’ blank
Workaround 2:
To create a new DWORD with name "DISABLED" with value equals to "00000001"
KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\PLAP Providers{5537E283-B1E7-4EF8-9C6E-7AB0AFE5056D}
"Disabled"=dword:00000001

NOTE: Make sure to follow the installation documentation for any prerequisites or custom configuration steps.