Predictable Ivanti Server Hostname Resolution with IPv6

When connecting to a Ivanti server, Ivanti Secure Access Client uses the services of the endpoint operating system to resolve the hostname to an IP address. If a Ivanti server hostname resolves to both IPv4 and IPv6 addresses, an IPv4 or an IPv6 address is presented to Ivanti Secure Access Client as the preferred IP address. The behavior depends on the operating system and how it is configured. For example, Windows 8.1adheres to IETF standards that define how to establish the default address selection for IPv6. macOS 10.6 does not support that standard. Additionally, Windows 8.1 default settings can be changed by netsh commands, so RFC compliance can be modified on the endpoint. For these and other reasons, it is difficult to predict which Ivanti server IP address would get resolved to on a given client machine.

For predictable hostname resolution, we recommend that you use different Ivanti server hostnames for IPv6 and IPv4 addresses. For example, configure myserver1.mycompany.com for IPv4 addresses and myserver1-v6.mycompany.com for IPv6 addresses. The Ivanti server administrator can publish myserver1-v6.mycompany.com to the Ivanti Secure Access Client users who are expected to connect over IPv6, and others will continue using myserver1.mycompany.com.