F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Marvin's avatar
Marvin
Icon for Cirrocumulus rankCirrocumulus
Apr 20, 2023

Cisco Umbrella client with APM client works after upgrade with DNS proxy enabled

We are working with an end user which uses both Cisco Umbrella and Big IP APM client components web browser to establish VPN.  WE are aware about the fact that there are some limitations as decribed ...
application delivery
BIG-IP Access Policy Manager (APM)
dns
G-Rob's avatar
G-Rob
Icon for Employee rankEmployee
Apr 24, 2023

While your Edge Client Components are the same, the Edge Client executable versions are 17 releases apart. I see that you're currently running 7.2.2 and the previous version was 7.1.8. 

A K article describing the issue was first published back in July of 2022: https://my.f5.com/manage/s/article/K80231353. The article references a potential workaround here: https://support.umbrella.com/hc/en-us/articles/360037481832-Roaming-Client-and-F5-VPN-Compatibility

I don't see specific information that indicates why your issues are alleviated. Is it possible that you performed updates to the Umbrella client as well? If not, checking the release notes on the intermin Edge Client releases might hold a clue. For examplel, 7.2.2.1 had several updates surrounding DNS: https://techdocs.f5.com/kb/en-us/products/big-ip_apm/releasenotes/related/relnote-edge-client-7-2-1-1.html

Marvin's avatar
Marvin
Icon for Cirrocumulus rankCirrocumulus
Apr 24, 2023

Hi Rob, ok thanks is this Big IP Edge client still used despite the fact that the client only uses web components and not the Big IP Edge client?

In other words are these two packaged dependent on eachother for proper funcioning of the DNS relay proxy?

  • G-Rob's avatar
    G-Rob
    Icon for Employee rankEmployee
    Apr 24, 2023

    I do not have an understanding of the APM client architecture at that level. Your best bet would be to open a support ticket. I am glad that your issue is no longer impacting!