Bug ID 693739: VPN cannot be established on macOS High Sierra 10.13.1 if full tunneling configuration is enabled

Last Modified: Sep 13, 2023

Affected Product(s):
APM-Clients APM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1

Fixed In:
13.0.1, 12.1.3.2, 11.6.3.2, 11.5.6

Opened: Nov 09, 2017

Severity: 2-Critical

Related Article: K70644505

Symptoms

For some Network Access configurations, VPN cannot establish a connection with client systems running macOS High Sierra 10.13.1 using F5 Edge client or Browser helper apps.

Impact

The Edge Client unsuccessfully tries to connect, resulting in a loop. The client cannot establish VPN.

Conditions

The following conditions must be true: -- The Network Access resource Traffic Options setting is configured for Force all Traffic Through Tunnel. -- The Network Access resource Allow Local Subnet setting is disabled. (Both of these options are defaults.) -- Client running macOS High Sierra 10.13.1.

Workaround

1. Navigate to the Network Access resource. 2. Set the Network Access resource Allow Local Subnet checkbox to Enabled. 3. Save the setting, and apply the Access Policy.

Fix Information

Edge Client operation does not go into a reconnect loop and is able to establish and maintain connection successfully on macOS High Sierra 10.13.1.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips