For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Will_Adams_1995's avatar
Will_Adams_1995
Icon for Nimbostratus rankNimbostratus
Oct 18, 2015

Client authentication random failure - 11.6 HF4

We have a pair of BIG IP 6900 appliances that work as an active/passive HA pair. Recently we have upgraded the appliances to 11.6 HF4 (we were on 11.3 HF10) and have been having issues with our clie...
BIG-IP Access Policy Manager (APM)
design
management
security
Will_Adams_1995's avatar
Will_Adams_1995
Icon for Nimbostratus rankNimbostratus
Nov 05, 2015

We seem to have found the issue as being something related to a chained bundle in our VPN configuration not being valid (the issuer had failed). However there are also signs that 11.6 HF4 on seeing multiple certificates for the same user does not send information back on request from the F5. For now the problem is solved by (1) updating the bundle and (2) removing all old (still valid) certificates and generating new ones.

 

Thanks for the help thus far.