Bug ID 2229285: APM VPN sessions fail with errorcode=22 after upgrade/rollback when Virtual Server uses address-lists

Last Modified: Feb 26, 2026

Affected Product(s):
BIG-IP APM, Install/Upgrade(all modules)

Known Affected Versions:
17.5.1.3, 17.5.1.4

Opened: Feb 26, 2026

Severity: 3-Major

Symptoms

After upgrading or rolling back BIG-IP APM software with “Install Configuration: YES”, users attempting to access VPN services may encounter the error: “Your session could not be established. Access policy configuration has changed on gateway. Please login again to comply with new access policy configuration.”

Impact

All APM virtual server access attempts fail immediately

Conditions

The APM Virtual Server uses traffic-matching-criteria (TMC) with address-lists

Workaround

1. Remove Address-lists from the APM virtual server before upgrade/rollback. 2. If the issue is encountered during upgrade/rollback, then: a. Remove the address-list from the virtual server b. Restart apmd

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips