Forum Discussion

RaNiAKeA's avatar
RaNiAKeA
Icon for Nimbostratus rankNimbostratus
Jul 02, 2026

APM) NA error "Configuration download failed"

Hello everyone   My client is currently using APM version 7253; prior to the OS upgrade, they were using version 7247. The setup involves an inline configuration with an SSL VA positioned upstream...
APM
big-ip apm
tls1.2
tls1.3
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jul 08, 2026

Hello, 
Have a look in this article

https://techdocs.f5.com/kb/en-us/products/big-ip_apm/releasenotes/related/relnote-edge-client-7-2-5-3.html#:~:text=1697301,connection%20with%20TLS1.2

 

This may match known issue 1697301 in the APM Client 7.2.5.3 release notes. It states that on Windows 10, VPN connection with Edge Client/WebVPN/Machine Tunnel/Custom Dialer may fail when TLS 1.3 is used. In your topology, the client negotiates TLS 1.3 with the SSL VA, so the client-side connection is still TLS 1.3 even though the SSL VA talks to APM with TLS 1.2. As a test, force TLS 1.2 on the client-facing SSL VA profile or test from Windows 11. If TLS 1.2 fixes it, this is likely the known issue.

 

RaNiAKeA's avatar
RaNiAKeA
Icon for Nimbostratus rankNimbostratus
Jul 20, 2026

Thank you for the reply.

However, all the clients experiencing this issue were running Windows 11.

I am also curious about the fact that the client-SSL VA communicated successfully using TLS 1.3 with version 7.2.4.7 (whereas SSLVA-APM used TLS 1.2).

I would like to know if the upgrade from version 7.2.4.7 to 7.2.5.3 could be causing issues related to TLS reassembly on the intermediate SSL-VA.