Deploying Ivanti Connect Secure on Azure Marketplace

1.Log into Azure portal and navigate to Azure Marketplace by clicking Create a resource.

2.Search with keyword Ivanti Connect Secure.

Azure Marketplace contains the following two Ivanti Connect Secure SKUs:

Ivanti Connect Secure-BYOL 2 NIC

Ivanti Connect Secure BYOL 3 NIC

3.Select Ivanti Connect Secure BYOL 3 NIC and click Create. In this section, 3-NICs model is chosen as example.

Basic Configuration

4.In the Basic Configuration step, enter the following parameters and click Next : Network Settings:

Select the Region and Zone

VM name: Name of the Ivanti Connect Secure to be deployed. Virtual name can be only lower-case letters and numbers, and must be 1-9 characters long.

SSH public key: Copy and paste an RSA public key in the single-line format or the multi-line PEM format. This key is used to access ICS via SSH. The SSH keys are generated using ssh-keygen on Linux and OS X, or PuTTyGen on Windows. For details about generating the SSH key pairs, refer:

For Windows: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/ssh-from-windows

For MacOS and Linux: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/mac-create-ssh-keys

Resource group: Name of the resource group to be deployed.

Network Settings

5.In the Network Settings configuration step, enter the following parameters and click Next: Instance Configuration

Virtual Network:

Select an existing virtual network from the list or

Create a new virtual network. Specify the virtual network name and the address space.

Subnets: Four subnets – external, internal, management and tunnel subnets - are auto-populated with names and address prefix values. Make any changes if required.

Public IP name and DNS prefix for the External and Management interfaces are auto-populated. Make any changes if required.

In a 2-NICs model, Public IP name and DNS prefix name for the External and Internal interfaces are auto-populated

 

Instance Configuration

6.In the Instance Configuration step, enter the following parameters:

Ivanti Connect Secure VM Size: Specify the size of VM. By default, 1x Standard DS3-v2 is set for 3-NICs model and 1x Standard DS2-v2 is set for 2-NICs model.

Diagnostic storage account: Storage account for the Virtual Machine’s diagnostics

Ivanti Connect Secure Version: Enter the version

Ivanti Connect Secure admin and Password: Enter the admin credentials

Ivanti Connect Secure Config Data: Provisioning parameters in an XML format. Refer the section ‘‘Ivanti Connect Secure Provisioning Parameters

Ensure that the attribute “accept-license-agreement” in pulse-config is set to “y”.

Summary Step

7.In the Summary step, once the final validation is complete, click Create.

Configuration Validation

8.Wait for a few minutes while it creates all the resources. This completes deploying ICS on Azure Marketplace.

For L3 connectivity, make sure that "<ICS VM name>-UDR" is properly associated with the subnet where Backend/Protected resources are connected. For example:

  • If ICS internal, external and management interfaces are connected to subnet1, subnet2 and subnet3 respectively and Backend/Protected resources are in subnet5, then we need to associate <ICS VM name>-UDR to subnet5.
  • If Backend/Protected resources are in Datacenter or in different virtual network, then associate <ICS VM name>-UDR to GatewaySubnet.