Symptoms

When using Active Directory to perform Step-Up-Authentication with APM, the number of authentications per second that APM can sustain is lower than what could be achieved with earlier releases. This is observed only on certain high end appliance platforms.

Impact

Performance in terms of authentications per second is degraded.

Conditions

All the following must be true: - APM is provisioned and configured to provide authentication services via the per-request access policy. - Active Directory is used as the authentication method. - A relatively high rate of authentication exists. - One of the following BIG-IP appliances is in use: i108xx i78xx 10xxx

Workaround

None.

Fix Information

None.

Behavior Change