Bug ID 453649: Added Enforce Autoconnection Mode to Edge Client

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF3

Opened: Mar 24, 2014

Severity: 3-Major

Symptoms

There is no way to configure BIG-IP Edge Client in enforce autoconnection mode when user has no control over Edge Client.

Impact

Edge Client always has three buttons, user can override Edge Client behavior.

Conditions

Edge Client is configured to be in AlwaysConnected mode. Connectivity profile has Enterprise LAN suffixes configured.

Workaround

None

Fix Information

The BIG-IP Edge Client can be configured to respect network location awareness (NLA) settings from the connectivity profile, and disconnects the VPN when inside enterprise network, and establishes VPN when outside of enterprise network. Edge Client has no button when operating in this mode. To configure network location awareness, Edge Client should be configured as follows: 1. 'Enable Always connected mode' checked. 2. 'Traffic flow when VPN is disconnected' set to 'Allow only in enterprise LAN' or 'Always'. 3. Connectivity profile should have suffixes configured.

Behavior Change

The BIG-IP Edge Client can be configured to respect network location awareness (NLA) settings from the connectivity profile, and disconnects the VPN when inside enterprise network, and establishes VPN when outside of enterprise network. Edge Client has no button when operating in this mode. To configure network location awareness, Edge Client should be configured as follows: 1. 'Enable Always connected mode' checked. 2. 'Traffic flow when VPN is disconnected' set to 'Allow only in enterprise LAN' or 'Always'. 3. Connectivity profile should have suffixes configured.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips