Forum Discussion

RaNiAKeA's avatar
RaNiAKeA
Icon for Nimbostratus rankNimbostratus
Jul 02, 2026

APM) NA error "Configuration download failed"

Hello everyone   My client is currently using APM version 7253; prior to the OS upgrade, they were using version 7247. The setup involves an inline configuration with an SSL VA positioned upstream...
APM
big-ip apm
tls1.2
tls1.3
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jul 08, 2026

Hello, 
Have a look in this article

https://techdocs.f5.com/kb/en-us/products/big-ip_apm/releasenotes/related/relnote-edge-client-7-2-5-3.html#:~:text=1697301,connection%20with%20TLS1.2

 

This may match known issue 1697301 in the APM Client 7.2.5.3 release notes. It states that on Windows 10, VPN connection with Edge Client/WebVPN/Machine Tunnel/Custom Dialer may fail when TLS 1.3 is used. In your topology, the client negotiates TLS 1.3 with the SSL VA, so the client-side connection is still TLS 1.3 even though the SSL VA talks to APM with TLS 1.2. As a test, force TLS 1.2 on the client-facing SSL VA profile or test from Windows 11. If TLS 1.2 fixes it, this is likely the known issue.

 

  • RaNiAKeA's avatar
    RaNiAKeA
    Icon for Nimbostratus rankNimbostratus
    Jul 20, 2026

    Thank you for the reply.

    However, all the clients experiencing this issue were running Windows 11.

    I am also curious about the fact that the client-SSL VA communicated successfully using TLS 1.3 with version 7.2.4.7 (whereas SSLVA-APM used TLS 1.2).

    I would like to know if the upgrade from version 7.2.4.7 to 7.2.5.3 could be causing issues related to TLS reassembly on the intermediate SSL-VA.