(SOL12086) When using an Active Directory AAA configuration, the BIG-IP APM may be unable to resolve the reverse DNS PTR record for the Active Directory domain controller defined in the AAA configuration. As a result, you may receive an error message that appears similar to the following example:
Local error, SASL(-1): generic failure: GSSAPI Error: An invalid name was supplied (Cannot determine realm for numeric host address)
If you receive this error message, ensure that your DNS servers that are queried
General Solution: Error Message: Local error, SASL(-1): generic failure: GSSAPI Error: An invalid name was supplied (Cannot determine realm for numeric host address)
↧
↧
Known Issue: Administrative connections to the BIG-IP system may not be accessible by way of the self IP address
(SOL14032) Description
Administrative connections to the BIG-IP system may not be accessible by way of the self IP address.
This issue occurs when the following condition is met:
You attempt to remotely access the BIG-IP system using a self IP address that is configured on a non-default route domain.
The default route domain is using ID 0, hence a non-default route domain ID is using a value greater than 0.
Impact
Administrative connections to the BIG-IP system may fail.
Symptoms
As a result of this iss
↧
Known Issue: Node description may not be displayed in the Configuration utility
(SOL14039)
Description
The system does not display node descriptions in the BIG-IP Configuration utility's Nodes: Node List page.
Impact
You are unable to view the description text of a node from the Nodes: Node List page in the BIG-IP Configuration utility.
Symptoms
As a result of this issue, you may encounter the following symptom:
You do not see the node description text in the Local Traffic > Nodes - Node List page in the Configuration utility, because the system does not display the Description
↧
Known Issue: The BIG-IP PSM system may not report request check violations
(SOL14035) Description
The BIG-IP PSM system may not report request check violations.
This issue occurs when all of the following conditions are met:
A request length exceeds the value defined for the long_request_buffer_size parameter.
Note: The default long_request_buffer_size value is 10 MB. For more information about modifying this value, refer to SOL14034: Configuring large request processing for PSM.
The Request Length Exceeds Defined Buffer Size request check is set to Alarm and Block.
Impac
↧
Known Issue: AAA server authentication through the BIG-IP Access Policy Manager fails with an invalid credentials error
(SOL14041)
Description
AAA (Authentication, Authorization, and Accounting) server authentication through the BIG-IP APM system fails with the error invalid credentials.
This issue occurs when the following condition is met:
An AAA server password is longer than 29 characters.
The maximum password length is 32 characters. However, only 29 of the 32 characters are available for a user to set their password. The three additional characters are reserved for use by the encryption algorithm. This will affect
↧
↧
Known Issue: The Device Trust > Local Domain help page may generate an error message
(SOL14043) Description
The Device Trust > Local Domain online help page may generate an error message.
This issue occurs when the following condition is met:
You view the Device Trust > Local Domain online help page.
Impact
You're not able to view the online help for the Local Domain settings
↧
Known Issue: The BIG-IP system may monitor a gateway failsafe pool configured for a peer BIG-IP system
(SOL14050) Description
The BIG-IP system may monitor a gateway failsafe pool configured for a peer BIG-IP system.
This issue occurs when all of the following conditions are met:
The BIG-IP is a member of a high availability device group
Each BIG-IP system in the device group is configured to monitor a unique gateway failsafe pool
The BIG-IP system receives a ConfigSync
When the BIG-IP system receives aConfigSync from a peer BIG-IP system, the bigd process will begin monitoring all gateway failsafe pools,
↧
General Solution: F5 Data Solutions Compatibility Matrix
(SOL10909) The F5 Data Solutions Compatibility Matrix provides interoperability information to use as a guide in qualifying environments for use with the F5 ARXand Data Manager systems.
The following PDF file includes thecurrent F5 Data Solutions Compatibility Matrix:
F5 Data Solutions Compatibility Matrix
↧
Security Advisory: CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
(SOL14054)
↧
↧
General Solution: The CSRF protection feature does not support dynamically generated or modified URLs
(SOL13712) Summary
Cross-site request forgery (CSRF) is an attack method that exploits a pre-existing relationship of trust and forces a user to run unwanted actions on a web application in which the user is currently authenticated. You can specify URLs to which the BIG-IP ASM system will apply CSRF protection. However, the current design of the CSRF protection feature does not support dynamically generated or modified URLs.
Description
The CSRF protection feature allows you to protect against CSRF attack
↧
General Solution: Configuring the BIG-IP system to log to a remote syslog server (11.x)
(SOL13080) This article applies to BIG-IP 11.x. For information about other versions, refer to the following article:
SOL5527: Configuring the BIG-IP system to log to a remote syslog server (9.x - 10.x)
Purpose
You should consider using this procedure under the following condition:
You need to configure remote syslog servers on the BIG-IP system.
Prerequisites
You must meet the following prerequisites to use this procedure:
The BIG-IP system is running 11.x software.
The remote syslog server is access
↧
Release Note: BIG-IP LTM and TMOS 11.2.1
This release note documents the version 11.2.1 release of BIG-IP Local Traffic Manager and TMOS.
↧
Manual: BIG-IP APM Client Compatibility Matrix
↧
↧
Release Note: BIG-IP WOM 11.2.1
This release note documents the version 11.2.1 release of BIG-IP WAN Optimization Manager.
↧
General Solution: Configuration sizing and PVA Acceleration
(SOL11038) A BIG-IP system is subject to limitations in the number of objectsthat may be configured when the configuration contains virtual servers for which Packet Velocity ASIC (PVA) acceleration is required. If more than the specifiedmaximum number of objects is configured,virtual servers which otherwise qualify for PVA acceleration are demoted to wire mode (no PVA acceleration).
Note: To determine whether the system is equipped with a PVA chip, and to determine the relevant version of the chip, refer t
↧
General Solution: Configuring SNMPv1 traps to use a source IP address other than the management IP address
(SOL7530) By default, SNMPv1 traps use the IP address associated with the BIG-IP host name as the agent-addr address, which is the IP address from which SNMP traps originate.
In the BIG-IP system, the management port IP address is typically associated with the system's host name. However, in some cases the management port is not used, or remote SNMP systems reside on an IP network reachable through an interface other than the management port. In those cases, an alternate trapsource address must be configu
↧
Release Note: BIG-IP APM 11.2.1
This release note documents the version 11.2.1 release of BIG-IP Access Policy Manager.
↧
↧
Release Note: BIG-IP Edge Gateway 11.2.1
This release note documents the version 11.2.1 release of BIG-IP Edge Gateway.
↧
Release Note: BIG-IP APM 11.2.0
This release note documents the version 11.2.0 release of BIG-IP Access Policy Manager.
↧
General Solution: End of Sale announcement for the ARX 1500 platform
(SOL13847) With the release of the F5 ARX 1500+ platform, F5 is announcing the End of Sale of the F5 ARX 1500 platform effective January 1, 2013.F5 is providing Advanced Product Notification to customers and partners announcing intent to retire the products listed below.
Platform Name
End of Sale (EoS)
End of New Software Support (EoNSS)
End of Software Development (EoSD)
End of Support Contract Renewal (EoSCR)
End of RMA (EoRMA)
End of Technical Support (EoTS)
ARX 1500
1-Jan-2013
1-Jan-2015
1-Jan-2016
1-
↧
More Pages to Explore .....