Configuring IoT Policy Provisioning

Pre-Requisite

IoT Policy Provisioning requires Profiler feature. You must install the Profiler license on Ivanti Policy Secure to enable it.

Summary of Configuration

A high-level overview of the configuration steps needed to set up IoT Policy Provisioning is shown below.

1. Configure Profiler

2. Configure PAN Enforcer

3. Configuring IoT Access Policy

   • Viewing Devices in Enforcer Policy Report

   • Alert Based Admission Control

   • Configuring Additional Device Category/Profile Groups

Basic Configurations

The basic configuration page enables you to configure Profiler to discover IoT devices in the network,

Enforcer to push the user identity information to Ivanti Policy Secure, and IoT Access Policy for IoT devices.

To launch the configuration page:

1. Select Endpoint Policy > IoT Access > IoT Policy Provisioning.

2. Click Basic Configuration.

   

   If Ivanti Policy Secure is already configured with Profiler and Enforcer. The configurations will be reused.

3. Configure the Profiler used to discover the IoT devices in the network. Click Profiler and configure the local Profiler. See Profiler Deployment Guide for complete configuration.

   The icons in the configuration page indicate the status of configuration.

   • Green tick mark refers that this section is configured correctly.

   • If the configuration section is in grey color, it indicates that the section is not configured.

   • Information icon refers that this section must be configured.

   

4. Configure the PAN Enforcer. Click Enforcer Connection and add PAN as a New Enforcer.

   

Once the configuration is complete and successful, the Administrator can see the configuration status as shown below.