Bug ID 903121: Evaluating and deploying Access Groups containing a remote desktop configuration

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IQ Access(all modules)

Known Affected Versions:
7.1.0

Fixed In:
7.1.0.1

Opened: Apr 22, 2020

Severity: 3-Major

Symptoms

When evaluating and deploying Access Groups containing a Remote Desktop configuration to a BIG-IP device, it might fail with the following following error: "Critical error: Error getting aclOrder value on object."

Impact

You might not be able to deploy configurations containing Remote Desktop objects to a managed BIG-IP devices.

Conditions

This error can happen if a Remote Desktop object was created on a managed BIG-IP running version 15.1 or later and then discovered and services imported.

Workaround

To resolve this issue, you can define aclOrder for a Remote Desktop object using the following API calls: For Remote Desktop - Citrix https://X.X.X.X/mgmt/cm/access/working-config/apm/resource/remote-desktop/citrix For Remote Desktop - RDP https://X.X.X.X/mgmt/cm/access/working-config/apm/resource/remote-desktop/rdp For Remote Desktop - VMWare https://X.X.X.X/mgmt/cm/access/working-config/apm/resource/remote-desktop/vmware-view After defining the aclOrder for the Remote Desktop objects, you should be able to successfully evaluate and deploy this configuration to managed BIG-IP devices.

Fix Information

This issue no longer occurs. You should be able to import configurations containing Remote Desktop objects and edit and save it on BIG-IQ. You should also be able to deploy configurations containing Remote Desktop objects to target BIG-IP devices from BIG-IQ.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips