Forum Discussion

ejohnson_27643's avatar
ejohnson_27643
Icon for Nimbostratus rankNimbostratus
Aug 09, 2007

API prompted to install new update

We've run into a problem when we try to make a network tunnel connection via the API after the Firepass has been updated the API client is interrupted by a security prompt to install an update to urxhost.cab. This disrupts the automated connection process we have developed and we're looking for any way around this. I've attached a screenshot of the window that pops up...in it, it gives the option to accept all future updates from F5 (if you click on the "more options"), but this requires user interaction. Is there any way to have the Firepass digitally sign the update files so that there's no security prompt? Or is there a way to configure the API so that it already has this "Always accept updates from F5" option checked?
  • does anyone have an example C+ code on how to ignore upgrading the component and continue to launch the Static Application Tunnels?

     

     

    We are in the process of upgrading from 6.0.1 to 6.0.2 and our API sites can't continue because it is being ask to upgrade and stops right there with the current code provided by the SDK.

     

  • This error was occurring for us intermittently when we upgraded to 6.0.2. We just ended up connecting to our API sites remotely and manually clicking on "Accept permanently". I'd be very interested to know if there is an API solution, as well.
  • I agree, the problem we have is our API sites have "no users" so it is just a pain to manually go to each site and upgrade the DLL files. Plus we don't have Admin access to the servers.

     

     

    I can easily ignore the Upgrade pop-up but the code can't launch the favorites (makes no sense)
  • I am testing on our "Lab" Firepass a setting I found in Device Management / Configuration / Client Update. I am going to test this today but I can't have this on for all my other none-API sites which still needs to be updated with the latest and greatest from F5. To bad this is not "per-Group" or "Per-URI"

     

     

    Disable the downloading and installation of ActiveX controls

     

    Use the option Disable top level ActiveX controls update to prevent the FirePass controller from updating ActiveX® components on the client PC. This feature is useful when one of the following conditions is met:

     

     

    You want to support previous versions of the ActiveX client component and do not want to download a newer version of the ActiveX control.

     

     

    You cannot update the ActiveX components on the client PC because the end user has limited rights on his client PC.

     

  • Andrey_Shigapo1's avatar
    Andrey_Shigapo1
    Historic F5 Account
    Another workaround is to use Installer Service, which provides UIless upgrade of all components.

     

    It could be found on admin UI

     

     

    Device Management : Client Downloads : Windows (x86):

     

    "Download Component Installer Service Package" link
  • We had the Installer Service installed on all of our machines too, but it didn't successfully update some machines. We never figured out why.
  • Andrey_Shigapo1's avatar
    Andrey_Shigapo1
    Historic F5 Account
    Did API fallback to using controls already installed on the system ? This is a supposed behaviour.

     

     

    Could you, please, contact our support to open a case and provide the following log file %SYSTEMROOT%\temp\F5InstServLog.txt and %SYSTEMROOT%\temp\logterminal.txt from the failed system, so we can follow up on that issue

     

     

    Thank you
  • I have no problems opening a support case on this but that is not the issue we want to resolve. I don't want to upgrade my end-points through their connection, I want to ignore the component request to upgrade and just launch the favorite resource (Static App).

     

     

    Plus the Running Service was only design to resolve the issue with End-Point Inspections (AV, FW). Network Access and App Tunnel are not covered by that Technology (I already have a CR with F5 on that issue). You will experience the popup to install if using Stand-alone client, internet browser, api even if you have the Component Installer Service running. It works greate on the OPSWAT.
  • Andrey_Shigapo1's avatar
    Andrey_Shigapo1
    Historic F5 Account
    Installer Service covers ALL client components, including Network Access and Tunnel. Can you, please, provide the CR number ?

     

     

    CR to extent API to resolve the issue you are experiencing has been created (CR92803)

     

     

    You can try to change the security setting "Download signed ActiveX controls" to "Enable" for appropriate security zone.