Bug ID 447302: APM incorrectly supports 'redirect' ending in an access policy for web browser clients when deployed for Citrix Web Interface in proxy mode.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.6.2 HF1, 11.4.1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF4, 11.5.1 HF6, 11.4.1 HF4

Opened: Feb 05, 2014

Severity: 4-Minor

Symptoms

When your access policy uses 'redirect' as the ending (policy result is 'redirect'), Citrix ICA Patcher fails with error: Jan 29 04:17:15 bigip3 err tmm[29825]: 01490000:3: ICA Patcher: Invalid session a5cced0f8a360d58829a8551b6bed4e8

Impact

Clients will be unable to connect.

Conditions

This can be encountered if your access policy ends with Redirect instead of Allow.

Workaround

Use 'allow' policy ending and do redirect in ACCESS_POLICY_COMPLETED event.

Fix Information

APM correctly supports 'redirect' ending in an access policy for web browser clients when deployed for Citrix Web Interface in proxy mode.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips