Forum Discussion
NimbostratusAPM) NA error "Configuration download failed"
Hello everyone
My client is currently using APM version 7253; prior to the OS upgrade, they were using version 7247.
The setup involves an inline configuration with an SSL VA positioned upstream of the APM.
Communication between the client and the SSL VA uses TLS 1.3, while communication between the SSL VA and the APM uses TLS 1.2.
VPN connections worked normally when using version 7247, but an "NA error" appears after upgrading to version 7253.
Has there been any change in TLS-related behavior between version 7247 and 7253?
Alternatively, has anyone else encountered a similar issue?
1 Reply
Hello,
Have a look in this articleThis may match known issue 1697301 in the APM Client 7.2.5.3 release notes. It states that on Windows 10, VPN connection with Edge Client/WebVPN/Machine Tunnel/Custom Dialer may fail when TLS 1.3 is used. In your topology, the client negotiates TLS 1.3 with the SSL VA, so the client-side connection is still TLS 1.3 even though the SSL VA talks to APM with TLS 1.2. As a test, force TLS 1.2 on the client-facing SSL VA profile or test from Windows 11. If TLS 1.2 fixes it, this is likely the known issue.
