Applies To:

Show Versions Show Versions

Supplemental Document: Feature Comparison between BIG-IP Edge Client and Inbox F5 VPN Client

Original Publication Date: 11/13/2013

Feature Comparison between BIG-IP Edge Client and Inbox F5 VPN Client

The BIG-IP® Edge Client® working with the BIG IP APM® provides secure remote access. The BIG-IP Edge Client has the broadest support for various endpoint operating systems. Starting with Windows 8.1, F5 Networks supports an additional client. This “Inbox F5 VPN Client” is part of the Microsoft Windows 8.1 software update. It is available as part of the operating system without the need to install any additional software.

The F5 Inbox VPN Client is fully supported by F5 Networks, Inc for all administrators of BIG-IP APM. Because this client is part of the Windows OS, software updates and fixes will be distributed as part of Microsoft Windows Cumulative Updates and hotfixes.  In contrast,  updates and fixes for the BIG-IP Edge Client are downloaded from the F5® support site.

Note: The F5 Inbox VPN Client is currently not supported on Windows Phone.  

The following tables compare the features of the BIG-IP Edge Client and the Inbox F5 VPN Client and note differences.

 

Authentication

Feature

Notes

Inbox F5 VPN Client on Windows 8.1

Edge Client on Windows 8.1 and earlier

Username/Password

 

Supported

Supported

Client certificates

 

Supported

Supported

Smart Cards

 

Supported

Supported

Weblogon mode (multifactor authentication, custom authentication flow)

 

Not Supported

Supported

Client-side inspection

Processes, registry entries, installed software

Not Supported

Supported

OPSWAT integration

Detection of AV, FW, Anti-Spyware, etc

Not  Supported

Supported

Credential Provider Support

VPN Establishment from system logon screen

Not Supported

Supported

VPN Auto connect

 

Supported

Not Supported

 

Tunnel

Feature

Notes

Inbox F5 VPN Client on Windows 8.1

Edge Client on Windows 8.1 and earlier

TLS 1.x

 

Supported

Supported

DTLS

 

Not Supported

Supported

Compression

 

Not Supported

Supported

Layer 4 optimization

 

Not Supported

Supported

No encryption

 

Supported

Supported

Automatic reconnect

 

Supported

Supported

Roaming between networks

 

Supported

Supported

Ipv4 transport

 

Supported

Supported

Ipv6 transport

 

Supported

Supported

 

Split Tunneling Scope

 

Feature

Notes

Inbox F5 VPN Client on Windows 8.1

Edge Client on Windows 8.1 and earlier

IncludeSubnet

Subnets to be routed through virtual VPN adapter

Supported

Supported

ExcludeSubnet

Subnets to exclude from routing through virtual VPN adapter

Supported

Supported

DNSSplit

DNS patterns to define intranet DNS namespace;

for example.
intranet.contoso.com, *.intra.contoso.com

Supported


Note: Patterns with ‘*’ in the middle are not supported; for example, intra.*.f5net.com

Supported

AllowLocalDHCPAccess

Exclude IP address of DHCP server from routing through virtual VPN adapter

Not Supported

Supported

AllowLocalSubnetAccess

Exclude local subnet and host or subnet in routes that are explicitly specified in the client routing table from routing through VPN adapter

Supported

 

DNSSuffix

DNS suffix for intranet

Supported

Supported

 

StaticHosts

IP address and host name pairs to specify static hosts upon VPN connection establishment

Not Supported

Supported

 

DNS

DNS server for VPN connection

Supported

Supported

 

WINS

WINS server for VPN connection

Not Supported

Supported

         

Client Proxy settings

Client proxy settings apply to the proxy behind the Access Policy Manager® and do not affect the VPN tunnel transport or interact with the TLS or DTLS configuration.
Use client proxy settings when intranet web servers are not directly accessible from the VPN gateway internal subnet.

Feature

Notes

Inbox F5 VPN Client on Windows 8.1

Edge Client on Windows 8.1 and earlier

Proxy support for FQDN names

 

Supported

Supported

Proxy support for subnets

 

Not Supported

Supported

ClientProxyScript

URL for a proxy auto-configuration script

-

Supported

ProxyHost

Address of the proxy client

Supported

Supported

ProxyPort

Port number of the proxy server

Not Supported

Supported

BypassLocal

Allow local (intranet) addresses to bypass the proxy server

Not Supported

Supported

ProxyExclusion

web addresses that do not need to be accessed through the proxy server. You can use wildcards to match domain and host names or addresses. For example, www.*.com, 128.*, 240.8, 8., mygroup.*, *.* , and so forth.

Supported

Note: Patterns with ‘*’ in the middle are not supported; for example, intra.*.f5net.com

Supported

 

Post connection establishment actions

Feature

Notes

Inbox F5 VPN Client on Windows 8.1

Edge Client on Windows 8.1 and earlier

AppPath

Path to the application configured to launch upon VPN tunnel establishment

Not Supported

Supported

 

Parameters associated with the application to launch

Not Supported

Supported

DriveMapping

Driver letter and UNC path for network shares, to be mapped automatically on the access computer  whenever a VPN connection is established

Not Supported

Supported

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)