Last Modified: Apr 25, 2024
Affected Product(s):
APM-Clients Install/Upgrade
Known Affected Versions:
7.1.6, 7.1.6.1, 7.1.7, 7.1.7.1, 7.1.7.2, 7.1.8, 7.1.8.1, 7.1.8.2, 7.1.8.3, 7.1.8.4, 7.1.8.5, 7.1.9, 7.1.9.7, 7.1.9.8, 7.1.9.9, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3
Opened: Sep 15, 2017 Severity: 3-Major
When the BIG-IP Edge Client is installed using the command-line interface (CLI) or msiexec, the following config parameters are not installed properly: -- Exclusion List -- Auto Launch -- Disconnect VPN Options (Block, Allow, Allow-Only-In-Enterprise-LAN) -- DNS Suffixes
Edge Client does not start on boot, and Stonewall exceptions are not applied.
Edge Client is installed using either the CLI or msiexec.
You can use either of the following workarounds: -- Using the CLI: Use the BIG-IP Edge Client installer to install the client by running the command: BIGIPEdgeClient.exe -- Using msiexec: For example, for always-connected mode, you must set DISCONNECTEDVPNOPTION, DNSSUFFIXES, STARTAPPWITHWINDOWS, and IP, Stonewall exclusion list. The command syntax is as follows: msiexec /i f5fpclients.msi /qn DISCONNECTEDVPNOPTION=<One of NumericValue Provided as below> DNSSUFFIXES=<Will be provided by the user> STARTAPPWITHWINDOWS=<Value 0 or 1> IP0=<Exclusion Domain suffix 1> IP1=<Exclusion Domain suffix 2> IP2=<Exclusion Domain suffix 3> IP3=<Exclusion Domain suffix 4> IP4=<Exclusion Domain suffix 5> /l*vx log.txt <DISCONNECTEDVPNOPTION> has 3 possible values that correspond to the option selected for 'Traffic flow when the VPN is disconnected': 0 – Block 1 – Allow 2 – Allow only in Enterprise LAN <STARTAPPWITHWINDOWS> command-line parameter instructs whether or not to establish a VPN during Windows logon. <IP0, IP1, IP2...IP9> parameters to specify the Stonewall exclusion domain suffixes; you can set up to 9. Example: msiexec /i f5fpclients.msi /qn DISCONNECTEDVPNOPTION=2 DNSSUFFIXES=example.com STARTAPPWITHWINDOWS=1 IP0=vpn.example.com /l*vx msiInstallerLog.txt Note: Make sure to uninstall all BIG-IP Edge Client-installed components prior to installing the edge-client .msi package. Otherwise, you might encounter errors related to installation privileges. Note: You may find some relevant information in K24416258: Overview of Always Connected Mode in BIG-IP Edge Client for Windows :: https://support.f5.com/csp/article/K24416258.
None