Forum Discussion
ejohnson_27643
Nimbostratus
Aug 09, 2007API prompted to install new update
We've run into a problem when we try to make a network tunnel connection via the API after the Firepass has been updated the API client is interrupted by a security prompt to install an update to urxhost.cab. This disrupts the automated connection process we have developed and we're looking for any way around this. I've attached a screenshot of the window that pops up...in it, it gives the option to accept all future updates from F5 (if you click on the "more options"), but this requires user interaction. Is there any way to have the Firepass digitally sign the update files so that there's no security prompt? Or is there a way to configure the API so that it already has this "Always accept updates from F5" option checked?
9 Replies
- blacksan_10396
Nimbostratus
does anyone have an example C+ code on how to ignore upgrading the component and continue to launch the Static Application Tunnels?
We are in the process of upgrading from 6.0.1 to 6.0.2 and our API sites can't continue because it is being ask to upgrade and stops right there with the current code provided by the SDK. - ejohnson_27643
Nimbostratus
This error was occurring for us intermittently when we upgraded to 6.0.2. We just ended up connecting to our API sites remotely and manually clicking on "Accept permanently". I'd be very interested to know if there is an API solution, as well. - blacksan_10396
Nimbostratus
I agree, the problem we have is our API sites have "no users" so it is just a pain to manually go to each site and upgrade the DLL files. Plus we don't have Admin access to the servers.
I can easily ignore the Upgrade pop-up but the code can't launch the favorites (makes no sense) - blacksan_10396
Nimbostratus
I am testing on our "Lab" Firepass a setting I found in Device Management / Configuration / Client Update. I am going to test this today but I can't have this on for all my other none-API sites which still needs to be updated with the latest and greatest from F5. To bad this is not "per-Group" or "Per-URI"
Disable the downloading and installation of ActiveX controls
Use the option Disable top level ActiveX controls update to prevent the FirePass controller from updating ActiveX® components on the client PC. This feature is useful when one of the following conditions is met:
You want to support previous versions of the ActiveX client component and do not want to download a newer version of the ActiveX control.
You cannot update the ActiveX components on the client PC because the end user has limited rights on his client PC. - Andrey_Shigapo1Historic F5 AccountAnother workaround is to use Installer Service, which provides UIless upgrade of all components.
It could be found on admin UI
Device Management : Client Downloads : Windows (x86):
"Download Component Installer Service Package" link - ejohnson_27643
Nimbostratus
We had the Installer Service installed on all of our machines too, but it didn't successfully update some machines. We never figured out why. - Andrey_Shigapo1Historic F5 AccountDid API fallback to using controls already installed on the system ? This is a supposed behaviour.
Could you, please, contact our support to open a case and provide the following log file %SYSTEMROOT%\temp\F5InstServLog.txt and %SYSTEMROOT%\temp\logterminal.txt from the failed system, so we can follow up on that issue
Thank you - blacksan_10396
Nimbostratus
I have no problems opening a support case on this but that is not the issue we want to resolve. I don't want to upgrade my end-points through their connection, I want to ignore the component request to upgrade and just launch the favorite resource (Static App).
Plus the Running Service was only design to resolve the issue with End-Point Inspections (AV, FW). Network Access and App Tunnel are not covered by that Technology (I already have a CR with F5 on that issue). You will experience the popup to install if using Stand-alone client, internet browser, api even if you have the Component Installer Service running. It works greate on the OPSWAT. - Andrey_Shigapo1Historic F5 AccountInstaller Service covers ALL client components, including Network Access and Tunnel. Can you, please, provide the CR number ?
CR to extent API to resolve the issue you are experiencing has been created (CR92803)
You can try to change the security setting "Download signed ActiveX controls" to "Enable" for appropriate security zone.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
