Symptoms

Endpoint inspection may not start when virtual server is accessed from Chrome browser of MacOS. When refreshed it may work properly. Also client-type agent in access policy incorrectly detects MacOS as win11.

Impact

Server incorrectly detects client platform macOS as win11

Conditions

-- User accesses virtual server via a Chrome browser on MacOS. -- Access policy has "client os" agent in VPE.

Workaround

When HTTP_REQUEST { if {[HTTP::uri] equals "/my.policy"} { if {[HTTP::header exists "Sec-CH-UA-Platform-Version"] && [HTTP::header exists "Sec-CH-UA-Platform"]} { set platform [string tolower [HTTP::header value "Sec-CH-UA-Platform"]] set platform [string tolower [string trim [string map {\" ""} $platform]]] if { $platform ne "windows" } { HTTP::header remove "Sec-CH-UA-Platform-Version" log local0. "Removing header $platform" } } } } when CLIENT_ACCEPTED { ACCESS::restrict_irule_events disable }

Fix Information

Server should detect platform correctly if client is using macOS.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips