Using the Initial Setup Wizard

Overview

The initial setup wizard allows you to quickly configure IPS to ensure that the IPS device is configured effectively and efficiently. You can open the initial setup wizard through Wizards > Initial Setup > Configure. As a best practice, it is recommended to configure Profiling as a first step so that all the network devices are discovered. You can then launch the wizard to configure the enforcement policies on the discovered devices.

Using the initial setup wizard, you can configure IPS for the following use cases:

  • Network visibility using Profiler functionality
  • Layer 2 enforcement through 802.1X, MAC authentication, and SNMP for endpoints.
  • Easy deployment for guest or BYOD access

Benefits

The initial setup wizard provides the following benefits:

  • Provides quick onboarding of existing Ivanti Connect Secure (ICS) users to IPS with a mechanism to import existing ICS policy configuration into IPS.
  • Allows users to easily and quickly deploy IPS based for the desired use case (network visibility, enforcement, and guest access).

Prerequisites

You must keep the following information ready before configuring the IPS device:

  • NTP server address and other details.
  • The license SKU or license server details. The IPS appliance is added as a license client with necessary licenses to be leased.
  • Authentication servers (AD/LDAP) must have groups defined for different roles so that corresponding access can be configured for L2 enforcement use case.
  • The list of switches along with IP address and other parameters such as VLAN information for different set of users.
  • Administrator account details of ICS for fetching the authentication server and role details.
  • Fingerprint database, subnets to scan, and switch details for Profiling the network.

Limitations

The following are the limitations:

  • Supports only layer 2 enforcement use cases.
  • The initial setup wizard is supported only with the new UI.
  • You can configure each use case only once using the wizard and cannot edit the configurations once it is completed.