Creating a Client Connection Set for Ivanti Connect Secure

To create a Pulse Client Connection:

1.From the admin console, select Users > Ivanti > Connections.

2.Click New.

3.Enter a name and, optionally, a description for this connection set.

You must enter a connection set name before you can create connections.

4.Click Save Changes.

5.From the main Pulse Client Connections page, select the connection set.

6.Under Options, select or clear the following check boxes:

•Allow saving logon information: Controls whether the Save Settings check box is available in login credential dialog boxes in Pulse Client. If you clear this check box, Pulse Client always requires users to provide credentials. If you select this check box, users have the option of saving their credentials.

•Allow user connections: Controls whether connections can be added by the user through the Pulse Client interface.

•Display splash screen: Clear this check box to hide the Pulse Client splash screen that normally appears when Pulse Client starts.

•Dynamic certificate trust: Determines whether users can opt to trust unknown certificates. If you select this check box, a user can ignore warnings about invalid certificates and connect to the target Ivanti server.

By default, Dynamic certificate trust check box will be unchecked.

•Dynamic connections: Allows new connections to be added automatically to Pulse Client when the user logs into a Ivanti server through the server’s Web portal, and then starts Pulse Client though the Web portal interface.

•FIPS mode enabled: Enable FIPS mode communications for all Pulse Client connections in the connection set. The Federal Information Processing Standard (FIPS) defines secure communications for the U.S. government. When a Pulse Client connection is operating in FIPS mode, FIPS On appears in the lower corner of the Pulse Client interface.

If the Ivanti Connect Secure hardware does not support FIPS mode operations, FIPS mode configuration options are not present in the admin console interface. FIPS mode operations are supported on PSA-V Series Ivanti Gateways and some SA series appliances. The device must be running Ivanti Policy Secure R5.0 or later or Ivanti Connect Secure R8.0 or later.

Users cannot enable FIPS mode for connections that are created on Pulse Client. You must deploy connections with FIPS mode enabled using a pre-configured connection set with FIPS mode enabled or have users establish a browser session to the FIPS-enabled Ivanti Connect Secure.

•Wireless suppression: Disables wireless access when a wired connection is available. Wireless suppression occurs only when the wired connection is connected and authorized.

7.Under Connections, click New to define a new connection.

8.Enter a name and, optionally, a description for this connection.

9.Select a type for the connection and then specify the connection. Type can be any of the following:

•Policy Secure (802.1X): Select this type if the connection establishes connectivity to an 802.1X wired or wireless device.

•Connect Secure or Policy Secure (L3): Select this type to define a connection for Ivanti Connect Secure or Ivanti Policy Secure.

•SRX: Select this type to define a connection to an SRX Series Services Gateway.

10.The connection configuration options that appear depend on the connection type you select.

After you have created the client connection set, create a client component set and select this connection set.