Application Resilience policies for F5 BIG-IP Edge Client

You can activate an Application Resilience policy for F5® BIG-IP® Edge Client® to collect information about the functional status of F5 BIG-IP Edge Client installed on your Windows devices and view the results in reports. You can also configure the policy to attempt to repair or reinstall the application.

Application Resilience policies for F5 BIG-IP Edge Client are supported on devices running:

  • a supported version of the Windows operating system

  • PowerShell version 5.1 or higher

    Due to PowerShell restrictions imposed by Microsoft, Application Resilience isn't supported for this application on devices running Windows 11 SE.

  • one of the following versions of F5 BIG-IP Edge Client:

    • 72.22.x or higher

      Significant software changes in higher versions may cause health checks to become invalid.

    • 72.2020.x to 72.2021.x
    • 71.2020.x to 71.2021.x
    • 71.2015.x

In addition to checking the version, the following table describes the health checks performed:

If you select Report higher versions as Compliant, higher versions report Compliant without running health checks.

Component Test performed
Services Installed Running Signed by
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1
 P P

One of the signers entered in the policy configuration

By default, Signers contains "F5 Networks Inc" and "Microsoft Windows Hardware Compatibility Publisher".
Application name

The application uses the following name:

  • BIG-IP Edge Client

1 Only checked if selected in the policy configuration

In addition to checking the version, the following table describes the health checks performed:

If you select Report higher versions as Compliant, higher versions report Compliant without running health checks.

Component Test performed
Services Installed Running Signed by
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1
 P P

One of the signers entered in the policy configuration

By default, Signers contains "F5 Networks Inc".
Application name

The application uses the following name:

  • BIG-IP Edge Client

1 Only checked if selected in the policy configuration

In addition to checking the version, the following table describes the health checks performed:

If you select Report higher versions as Compliant, higher versions report Compliant without running health checks.

Component Test performed
Services Installed Running Signed by
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1
  • F5 Networks Machine Certificate Checker service (F5MachineCertService.exe)1
  • F5 Networks Machine Tunnel Service (F5MachineTunnelService.exe)1
 P P F5 Networks Inc
Application name

The application uses the following name:

  • BIG-IP Edge Client

1Only checked if selected in the policy configuration

In addition to checking the version, the following table describes the health checks performed:

Report higher versions as Compliant is not available.

Component Test performed
Services Installed Running Signed by
  • F5 Networks Component Installer (F5InstallerService.exe)
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)
 P P F5 Networks
Application name

The application uses the following name:

  • BIG-IP Edge Client

You can configure an Application Resilience policy for F5 BIG-IP Edge Client to enable the Application Resilience (RAR) component A lightweight software component of the Secure Endpoint Agent that detects the status of third party applications installed on a device. The component may also attempt to repair the third party application if it is non-compliant. The RAR component is deployed on a device only when the device is associated with a customized policy group and that policy group's Application Resilience policy is activated. to attempt to repair F5 BIG-IP Edge Client if it's not functioning, or reinstall it if it's missing or can't be repaired.

Depending on the Absolute product licenses associated with your account, the Report and repair and Report, repair, and reinstall options may not be available.

The RAR component of the Secure Endpoint Agent can respond to the following issues:

Issue Resolution
Repair

One or more of the following services aren't running:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1

The RAR component restarts each stopped service.

One or more of the following services aren't installed and the service's executable can be detected on the device:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1

The RAR component reinstalls each missing service.
Reinstall

Downgrades are not supported. If the version installed on a device is higher than the expected version, no action is taken.
One or more of the following services aren't installed and the service's executable cannot be detected on the device:
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1

The RAR component downloads and installs the configured version of the application.

A device restart is required after the application is installed. The Secure Endpoint Agent doesn't force the device to restart, so a status of Not Compliant continues to show in the Application Resilience reports until the device user performs a restart. You can review the report's Status details to determine if a restart is required.
F5 BIG-IP Edge Client failed to be repaired

The expected version of one or more of the following applications aren't installed:

  • BIG-IP Edge Client
  • BIG-IP Edge Client Components

1 Only checked if selected in the policy configuration

Issue Resolution
Repair

One or more of the following services aren't running:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1

The RAR component restarts each stopped service.

One or more of the following services aren't installed and the service's executable can be detected on the device:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1

The RAR component reinstalls each missing service.
Reinstall

Downgrades are not supported. If the version installed on a device is higher than the expected version, no action is taken.
One or more of the following services aren't installed and the service's executable cannot be detected on the device:
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1

The RAR component downloads and installs the configured version of the application.

A device restart is required after the application is installed. The Secure Endpoint Agent doesn't force the device to restart, so a status of Not Compliant continues to show in the Application Resilience reports until the device user performs a restart. You can review the report's Status details to determine if a restart is required.
F5 BIG-IP Edge Client failed to be repaired

The expected version of one or more of the following applications aren't installed:

  • BIG-IP Edge Client
  • BIG-IP Edge Client Components

1 Only checked if selected in the policy configuration

Issue Resolution
Repair

One or more of the following services aren't running:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1
  • F5 Networks Machine Certificate Checker service (F5MachineCertService.exe)1
  • F5 Networks Machine Tunnel Service (F5MachineTunnelService.exe)1

The RAR component restarts each stopped service.

One or more of the following services aren't installed and the service's executable can be detected on the device:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1
  • F5 Networks Machine Certificate Checker service (F5MachineCertService.exe)1
  • F5 Networks Machine Tunnel Service (F5MachineTunnelService.exe)1

The RAR component reinstalls each missing service.
Reinstall

Downgrades are not supported. If the version installed on a device is higher than the expected version, no action is taken.

One or more of the following services aren't installed and the service's executable cannot be detected on the device:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)1
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)1
  • F5 Networks Component Installer (F5InstallerService.exe)1
  • F5 Networks Credentials Management Service (F5CredMgrSrv.exe)1
  • F5 Networks Inspector Service (f5InspectorService.exe)1
  • F5 Networks Machine Certificate Checker service (F5MachineCertService.exe)1
  • F5 Networks Machine Tunnel Service (F5MachineTunnelService.exe)1

The RAR component downloads and installs the configured version of the application.

A device restart is required after the application is installed. The Secure Endpoint Agent doesn't force the device to restart, so a status of Not Compliant continues to show in the Application Resilience reports until the device user performs a restart. You can review the report's Status details to determine if a restart is required.
F5 BIG-IP Edge Client failed to be repaired

The expected version of one or more of the following applications isn't installed:

  • BIG-IP Edge Client
  • BIG-IP Edge Client Components

1 Only checked if selected in the policy configuration

Issue Resolution
Repair

One or more of the following services aren't running:

  • F5 Networks Component Installer (F5InstallerService.exe)
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)

The RAR component restarts each stopped service.

One or more of the following services aren't installed and the service's executable can be detected on the device:

  • F5 Networks Component Installer (F5InstallerService.exe)
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)
  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)

The RAR component reinstalls each missing service.
Reinstall

Downgrades are not supported. If the version installed on a device is higher than the expected version, no action is taken.

One or more of the following services aren't installed and the service's executable cannot be detected on the device:

  • F5 Networks Traffic Control Service (F5TrafficSrv.exe)
  • F5 Networks DNS Relay Proxy Service (F5FltSrv.exe)
  • F5 Networks Component Installer (F5InstallerService.exe)

The RAR component downloads and installs the configured version of the application.
F5 BIG-IP Edge Client failed to be repaired, or the expected version isn't installed

The installer:

  • must be an EXE file

  • can have any file name

The RAR component looks for the following files names when checking pre-cached installers:

Component File name
Installers F5VPNInstaller.exe

Before you activate an Application Resilience policy, you need to configure the policy. You need to configure the application version in addition to the settings in Configuring Application Resilience policies.

To configure the application version:

  1. Under Application version, select 72.22.* or higher from the drop-down.

  2. Under F5 BIG-IP Edge Client version, enter the version of F5 BIG-IP Edge Client you expect to be running on your devices.

    • The target version must be a sequence of digits separated by a period.
    • You can use wild card "*" characters after the minor version, for example, 72.22.* or 72.22.1019.*.

    Make sure the version you are entering is consistent with version 72.22.x.

You also need to configure this setting in addition to the settings in Configuring Application Resilience policies.

To configure the F5 BIG-IP Edge Client additional setting:

By default, the policy performs a number of health checks of F5 BIG-IP Edge Client components. If a particular component isn't applicable to your organization's F5 BIG-IP Edge Client deployment, the health check may return a status of Not compliant when the F5 BIG-IP Edge Client is functioning correctly. To avoid false results, you can exclude one or more of the following components from the F5 BIG-IP Edge Client health check by clearing the component's checkbox:

  • F5 Networks Traffic Control
  • F5 Networks DNS Relay Proxy
  • F5 Networks Component Installer
  • F5 Networks Credentials Management
  • F5 Networks Inspector

Before you activate an Application Resilience policy, you need to configure the policy. You need to configure the application version in addition to the settings in Configuring Application Resilience policies.

To configure the application version:

  1. Under Application version, select 72.2020.* - 72.2021.* from the drop-down.

  2. Under F5 BIG-IP Edge Client version, enter the version of F5 BIG-IP Edge Client you expect to be running on your devices.

    • The target version must be a sequence of digits separated by a period.
    • You can use wild card "*" characters after the minor version, for example, 72.2020.* or 72.2021.0107.*.

    Make sure the version you are entering is consistent with the range selected in the Application version drop-down.

You also need to configure this setting in addition to the settings in Configuring Application Resilience policies.

To configure the F5 BIG-IP Edge Client additional setting:

By default, the policy performs a number of health checks of F5 BIG-IP Edge Client components. If a particular component isn't applicable to your organization's F5 BIG-IP Edge Client deployment, the health check may return a status of Not compliant when the F5 BIG-IP Edge Client is functioning correctly. To avoid false results, you can exclude one or more of the following components from the F5 BIG-IP Edge Client health check by clearing the component's checkbox:

  • F5 Networks Traffic Control
  • F5 Networks DNS Relay Proxy
  • F5 Networks Component Installer
  • F5 Networks Credentials Management
  • F5 Networks Inspector

Before you activate an Application Resilience policy, you need to configure the policy. You need to configure the application version in addition to the settings in Configuring Application Resilience policies.

To configure the application version:

  1. Under Application version, select 71.2020.* - 71.2021.* from the drop-down.

  2. Under F5 BIG-IP Edge Client version, enter the version of F5 BIG-IP Edge Client you expect to be running on your devices.

    • The target version must be a sequence of digits separated by a period.
    • You can use wild card "*" characters after the minor version, for example, 71.2020.* or 71.2020.225.*.

    Make sure the version you are entering is consistent with the range selected in the Application version drop-down.

You also need to configure this setting in addition to the settings in Configuring Application Resilience policies.

To configure the F5 BIG-IP Edge Client additional setting:

By default, the policy performs a number of health checks of F5 BIG-IP Edge Client components. If a particular component isn't applicable to your organization's F5 BIG-IP Edge Client deployment, the health check may return a status of Not compliant when F5 BIG-IP Edge Client is functioning correctly. To avoid false results, you can exclude one or more of the following components from the F5 BIG-IP Edge Client health check by clearing the component's checkbox:

  • F5 Networks Traffic Control
  • F5 Networks DNS Relay Proxy
  • F5 Networks Component Installer
  • F5 Networks Credentials Management
  • F5 Networks Inspector

  • F5 Networks Machine Certificate Checker

  • F5 Networks Machine Tunnel

Before you activate an Application Resilience policy you need to configure the policy.