Original Publication Date: 02/16/2018
Version 3.0.3 of F5 Access for Android devices is now available. The download is available from the app store for your device.
For a comprehensive list of documentation that is relevant to this release, refer to the following page:
|705997||Previously, F5 Access did not respond when using an MDM-managed configuration in an Android for Work profile. This has been fixed.|
|706349||Previously, F5 Access on Android 7.0 or 7.1 might crash during connection on some Samsung devices. This issue has been fixed.|
|691546||Previously, DTLS would switch to TLS on networks with high latency. The internal DTLS timeout has been increased allowing DTLS to work on networks with latency of up to 3000ms.|
|643523||Previously, connections on some hardware with SSL Certificates took a long time. This issue has been resolved.|
|667358||Previously, if the root certificate was missing from the device trusted list, but an intermediate certificate was included, certificate verification would fail on Android 7.x. Certificate verification will now succeed if only an intermediate CA certificate is found in the device trusted list.|
|669416||Previously, when attempting to authenticate using Google ID, authentication could not complete. Authentication with Google ID now succeeds.|
|498040||Previously, when a session was closed, F5 Access cleared persistent cookies. F5 Access no longer clears persistent cookies when the session is closed.|
|517367||An Edge Client configuration created in version 2.0.4 or earlier would no longer auto-reconnect after the client was upgraded To version 2.0.6 or later. This issue has been fixed, and no longer occurs on F5 Access 3.0.0.|
|517373||With some devices and applications, F5 Access closes the tunnel when a GPS application starts a location search. this has been fixed.|
|579559||Previously, Network Access always fell back to a TLS connection even if DTLS was configured when connecting to some hardware platforms. Network Access no longer falls back to TLS.|
|451826||When F5 Access uses split tunneling for traffic, after establishing a VPN connection, all DNS queries are sent to the VPN-configured enterprise DNS server.|
|504685||F5 Access does not change to the Reconnecting state if the GTM server is down. Load balancing with GTM doesn't work.|
|624395||The web logon screen might disappear after a user sends F5 Access to the background after entering an RSA SecurID software token PIN.|
|647947||Client certificate authentication fails in the Android for Work profile on some Samsung devices if a certificate is selected from Device Credentials Storage. As a workaround, the certificate should be installed in F5 Access internal credentials storage using the option Install from SD cardor from the Download menu. To do this, in the F5 Access App, choose , and click the + (add button). Select either Install from SD card or Download.|
|706416||Always-On VPN mode cannot be enabled on Android 8.1.0 in an Android for Work managed profile.|
|574604||VPN connections fail repeatedly with the Thursby smart-card reader, if the user does not enter the smart card unlock PIN before the 30 second timeout has expired. This is caused by a known issue in Thursby SubRosa app. As a workaround, force stop the SubRosa app, or reboot the device.|
|597826||F5 Access fails to read smart cards using Thursby smart card reader when running within Android for Work profile.|
|617631||When Always-On VPN Mode is enabled, a VPN connection is established, and a Network Access resource is configured to use split tunneling, resources from the split tunneling space can be successfully accessed using the managed application, but all resources outside of the split tunneling space cannot be accessed by the managed application.|
|620294||In Android 7.0 RC4, ciphers and SSLv3 are disabled for security reasons. AES ciphers must be enabled in the RSA Authentication Manager configuration in order for Dynamic Seed Provisioning (CT-KIP) to work on Android 7.0. For more details, see https://community.rsa.com/docs/DOC-45530. As a workaround, follow the steps in the linked article to enable non-RC4 cipher suites.|
|634069||In most cases, when an Always-On VPN is disabled by the DPM (Device Policy Manager), the F5 Access VPN will be revoked if it is currently connected. In some corner cases, if F5 Access is not connected when, for example, the DPM enables Always-On VPN, but the connection doesn't start because of a misconfiguration, and the DPM then disables Always-On VPN, F5 Access won't be notified, and may continue to attempt to reconnect until the device is rebooted.|
|616957||If Always-On VPN mode is enabled for F5 Access by an MDM, and a force stop is done for F5 Access, F5 Access goes into the Disconnected state, and the user loses internet access through managed apps. F5 Access does not reestablish the VPN connection automatically. As a workaround, the user can restart the device to reestablish Always-On VPN mode. Another workaround is to disallow force stops in the MDM configuration, using DISALLOW_APPS_CONTROL.|
|617362||On some devices with Android 4.x, F5 Access Home screen icons might not get updated, and continue to show the older Edge Client icon. This is caused by Android issue 42921: https://code.google.com/p/android/issues/detail?id=42921|
|619106||On certain Android devices F5 Access will show 2 icons in notification area when connected to VPN. This behavior is by design.|
|629242||The RSA SecurID software token PIN setup might timeout if the user does not provide a new PIN within the RSA SecurID token interval.|
|Phone - North America:||1-888-882-7535 or (206) 272-6500|
|Phone - Outside North America, Universal Toll-Free:||+800 11 ASK 4 F5 or (800 11275 435)|
|Fax:||See Regional Support for your area.|
For additional information, please visit http://www.f5.com.
You can find additional support resources and technical documentation through a variety of sources.
Free self-service tools give you 24x7 access to a wealth of knowledge and technical support. Whether it is providing quick answers to questions, training your staff, or handling entire implementations from design to deployment, F5 services teams are ready to ensure that you get the most from your F5 technology.
AskF5 is your storehouse for thousands of knowledgebase articles that help you manage your F5 products more effectively. Whether you want to browse periodically to research a solution, or you need the most recent news about your F5 products, AskF5 is your source.
The F5 DevCentral community helps you get more from F5 products and technologies. You can connect with user groups, learn about the latest F5 tools, and discuss F5 products and technology.
To subscribe, click AskF5 Publication Preference Center, enter your email address, select the publications you want, and click the Submit button. You will receive a confirmation email. You can unsubscribe at any time by clicking the Unsubscribe link at the bottom of the email, or on the AskF5 Publication Preference Center screen.