F5 BIG-IP Edge Client - Firewall Check Failed

Question

Hi all.
I'am new here and I don't know almost nothing about F5. But I have to support F5 BIG-IP Edge Client. And from time to time we have the following problem:
When the user tries to connect they get the message "Firewall check failed. Please activate Windows Firewall and try again." But that problem have only 3-5 users. Mostly after the Windows Updates. We tried a few things:&nbsp;

Uninstall and install the BIG-IP SoftwareChecked the Windows firewall were on, also the rulesWith diffrent user on the same clientAnd a lot of other things I cant remember nothing helped.

So we have to install a new Windows on the machine, which can not be the solution.
Maybe anyone of you had the same problem. I hope you can help me.&nbsp;
We use Windows 7 x64 Notebooks. BIG-IP Edge Client Version is 7101,2014,1106,1707.&nbsp;
Thanks&nbsp;

boneyard · Answer

if you a have support contract on this platform with F5 just contact them. they have to possibility to investigate much deeper then we can here via a forum.

of course someone might have experienced exactly the same and can help, but opening a support ticket in parallel is always a good idea.

jogoldberg · Answer

Hi - I have been having the same problem for 2 months.&nbsp;Windows 10 Version 22H2HP ZBook Fury 15.6 inch G8 Mobile Workstation PCBigIP Edge Client 7241,2023,331,1108&nbsp;Firewall check fails when trying to connect. I get this e-mail from the system:From: admin@xxxxxxxxxxxxxxxxxxxxx&nbsp;Sent: Thursday, 1 August, 2024 11:21 AMTo: xxxxxxxxxxxxxxxxxxxxSubject: Failed VPN Login - Session ID xxxxxxxxxxxxxxxx&nbsp;Hello, You are receiving this email after failing to successfully connect to the Remote Access VPN Service. Please contact Local IT if you require assistance and they will help you to resolve your issue. The information below is to be recorded on any Service Now or Support Desk tickets to assist in troubleshooting errors. Session ID = xxxxxxxxxxxx Machine Certificate Check Result = 1 AD Query Result = 1 AD Auth Result = 1 MFA Authentication Result = 1 Firewall Check Result = 0 We were unable to detect an installed and running firewall on your device. AntiVirus Check Result = AD Groups MembershipF5 Diagnostics says:2024-08-01, 9:36:11:678, 5080,12232,UNINSTALL, 48, , 373, ReportGenerator::GetOpswatEndPointInspectionLogs, OPSWAT Result: , {&nbsp; &nbsp; "runs": [&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "api": "3",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "expression": "type=fw&amp;collect= 1",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "expression_parsed": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "Firewall software Check": ""&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; },&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "=": "===========================================================",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "+": "=====================Firewall software Check==========================",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "_": "===========================================================",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "result_parsed": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "result": "0",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "state": "0",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "sdk": "4.3.2711.0",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "engine": "4.3.3969.0",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "count": "2",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "id1": "6015",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "vendor_id1": "6",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "version1": "10.0.19041.4291",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "name1": "Microsoft Windows Firewall",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "vendor_name1": "Microsoft Corp.",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "state1": "0",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "id2": "492000",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "vendor_id2": "492",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "version2": "7.13.18308.0",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "name2": "CrowdStrike Falcon",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "vendor_name2": "CrowdStrike, Inc.",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "state2": "0"&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; },&nbsp;This is quite strange as the firewalls are definitely running:Microsoft Windows [Version 10.0.19045.4651](c) Microsoft Corporation. All rights reserved.C:\Users\jogoldberg&gt;netsh advfirewall show allDomain Profile Settings:----------------------------------------------------------------------State &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ONFirewall Policy &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; BlockInbound,AllowOutboundLocalFirewallRules &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A (GPO-store only)LocalConSecRules &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A (GPO-store only)InboundUserNotification &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EnableRemoteManagement &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;DisableUnicastResponseToMulticast &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;EnableLogging:LogAllowedConnections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DisableLogDroppedConnections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DisableFileName &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;%systemroot%\system32\LogFiles\Firewall\pfirewall.logMaxFileSize &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 4096Private Profile Settings:----------------------------------------------------------------------State &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ONFirewall Policy &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; BlockInbound,AllowOutboundLocalFirewallRules &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A (GPO-store only)LocalConSecRules &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A (GPO-store only)InboundUserNotification &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EnableRemoteManagement &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;DisableUnicastResponseToMulticast &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;EnableLogging:LogAllowedConnections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DisableLogDroppedConnections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DisableFileName &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;%systemroot%\system32\LogFiles\Firewall\pfirewall.logMaxFileSize &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 4096Public Profile Settings:----------------------------------------------------------------------State &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ONFirewall Policy &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; BlockInbound,AllowOutboundLocalFirewallRules &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A (GPO-store only)LocalConSecRules &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;N/A (GPO-store only)InboundUserNotification &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EnableRemoteManagement &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;DisableUnicastResponseToMulticast &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;EnableLogging:LogAllowedConnections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DisableLogDroppedConnections &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; DisableFileName &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;%systemroot%\system32\LogFiles\Firewall\pfirewall.logMaxFileSize &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 4096Ok.&nbsp;We've already tried the following:Make sure VPN server is set to the correct server - DoneTry the diagnostic from https://&lt;f5 server&gt;/checkfw - Done. Same error as the BigIP Edge ClientHold down power button for 1 minute to do a forced unclean shutdown of laptop to clear memory - DoneTry different WiFi network - Tried home Wifi, tried public Wifi, tried conference Wifi, tried LTE, tried iPhone Hotspot - same resultFrom corporate LAN, performed a GPUpdate, and renewed my machine certificate - DoneSent multiple F5 Client Diagnostic reports - DonePerformed GPUpdate myself while at The Office - DoneConfirm that Group policy files located at C:\windows\System32\GroupPolicy are up to date - DoneUninstall/Reinstall F5 BigIP-Edge client - DoneCheck MFA Setup - DoneCheck Certificates - DoneCan the community offer any guidance/advice?

boneyard · Answer

Ill repeat what I said almost 9 years ago, please contact F5 support, they can look into this with your details and their expertise of the system. You might get lucky here if someone experienced exactly the same, but chance is very low.

Forum Discussion

F5 BIG-IP Edge Client - Firewall Check Failed

Recent Discussions

Decode ObjectSID from Base64-encode string

iRule - Url rewrite and header replace and pool selection not working

ip x-forwarding

F5 ASM API-Protection Policy

ports are showing open on online scanning tool

Related Content

F5 Big-IP VE on azure

Big-IP DNS - Zone Transfers

BIG IP 201 Cert

BIG IP APM CCU perpetual

BIG IP VE on a single network

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS