Ivanti Connect Secure: Tenant Administration Guide

Contents

• Overview
• Logging in to nSA
  • Preparing to Log in
  • Logging in to the Ivanti Neurons for Secure Access as a Tenant Admin
    • Changing the UI Theme
    • Setting the Timezone
    • Configuring Session Timeouts
  • Logging out of the Ivanti Neurons for Secure Access
• Managing Existing ICS 9.x Appliance
• Registering ICS Gateway
  • Completing Registration of a ICS Appliance
• ICS Gateway Deployment
  • Deploying on VMware
  • Deploying on Hyper-V
  • Deploying on KVM
  • Deploying on AWS Cloud
    • System Operations
    • Troubleshooting
    • Frequently Asked Questions
  • Deploying on Azure Cloud
    • System Operations
  • Deploying on Google Cloud Platform
• ICS Gateway Analytics
  • Introduction
  • Reviewing Your Network Activity
    • Understanding the Display
    • Using the Filter Bar
    • Viewing the Network Summary Ribbon
    • Using the World Map
    • Using the Sankey Chart View
    • Using the Sessions, Non-Compliances, Connected Clients Version and Pre-Auth Non-Compliances Charts
    • Using the Top Active Breakdown Charts
  • Reviewing Users Activity
    • Understanding the Display
    • Using the Filter Bar
    • Viewing the Users Summary Ribbon
    • Viewing a Summary of UEBA Threat Scores for your Users
    • Viewing the Users Session Trend
    • Viewing the Users Activity Charts
  • Reviewing Application Usage
    • Understanding the Display
    • Using the Filter Bar
    • Using the Applications Summary Ribbon
    • Viewing Top Protocols by Application Access
    • Viewing Applications Access Trend
    • Using the Sankey Chart View
    • Viewing the Activity Charts
    • Configuring nZTA Policy to an ICS Application
  • Reviewing Individual User Activity
    • Using the Filter Bar
    • Viewing the User Summary Ribbon
    • Viewing the UEBA Threat Score
    • Viewing the User Session Trend
    • Viewing the User Activity Charts
    • Viewing the User Device and Status
  • Reviewing Gateways Status and Versions
    • Understanding the Display
    • Viewing the Gateways Summary Ribbon
    • Viewing the Gateways Status and Versions
    • Viewing the Gateways Access Trend
    • Viewing the Top Gateway Activity Charts
  • Checking the Logs
    • Setting a Log Time Period
    • Setting Log Criteria and Filtering the Output
    • Viewing Log Records
    • Filtering the Logs
    • Exporting Logs
    • Viewing Scheduled Log Export Jobs and Downloading Log Files
  • Associating Geographical locations to IP Addresses
  • Configuring Actionable Insights
  • Generating Reports
    • Accessing the Reports Page
    • Configuring a Report
    • Configuring Pre-defined Report
  • Managing the Sessions
    • Managing Active Sessions
    • Viewing Exported IF-MAP Sessions
    • Managing Imported IF-MAP Sessions
    • Managing ActiveSync Devices
  • Viewing Alerts and Notifications
• ICS Gateway Management
  • Introduction
  • Viewing ICS Gateway/Cluster Details
  • Restarting Services
  • Rebooting ICS Gateway/Cluster
  • Rolling Back a Gateway/Cluster
  • Upgrading a Gateway and Cluster
  • Upgrading Multiple Gateways and Clusters
    • Viewing the Installed Packages
    • Upgrading Gateways and Clusters with Ivanti Secure Access Client
    • Upgrading Gateways and Clusters with a New Gateway Version
    • Upgrading Gateways and Clusters with ESAP
  • Removing Ivanti Connect Secure Gateway
  • Configuring Integrity Scanner
• ICS Cluster Management
  • Creating ICS Cluster
    • Editing a Cluster
    • Removing a Cluster
  • Deploying an Active/Active Cluster
    • Configuring an Active/Active Cluster
  • Deploying an Active/Passive Cluster
    • Configuring an Active/Passive Cluster
• Multinode Configuration Management
  • Introduction
  • Adding Configuration Template
    • Viewing Configuration Templates
    • Editing Configuration Template
    • Reconcile Configuration
  • Config Synchronization
  • Viewing Template Logs
  • Configuring Certificates
    • Importing a Trusted Client CA Certificate
    • Configuring Auto-Importing of Client Certificates
    • Configuring a Proxy Server for CRL Downloads and OCSP Status Checks
  • Configuring SAML
    • Managing SAML Metadata Files
  • Telemetry Settings
  • Configuring Host Checker Policy
    • Checking for Third-Party Applications Using Predefined Rules
    • Specifying Customized Requirements Using Custom Rules
  • Configuring Authentication Servers
    • Configuring Local Authentication Server
    • Configuring ACE Authentication Server
    • Configuring RADIUS Authentication Server
    • Configuring Certificate Authentication Server
    • Configuring LDAP Authentication Server
    • Configuring SAML Authentication Server
    • Configuring TOTP Authentication Server
    • Configuring MDM Authentication Server
    • Configuring Active Directory Authentication Server
  • Archiving Servers
• System Configuration
  • Introduction
  • NTP Configuration
  • Licensing Mode
  • Security Configuration
    • Inbound SSL Options
    • Outbound SSL Options
    • Health Check Options
    • Miscellaneous Setup
    • Advanced Configuration
  • Certificates
    • Device Certificates
    • Trusted Client CAs
    • Trusted Server CAs
    • Client Auth Certificates
    • Code-Signing Certificates
    • Certificate Validity Check
  • NCP Configuration
  • Client Types Configuration
  • Virtual Desktops Configuration
  • User Record Synchronization
    • General Setup
    • Client Configuration
    • Server Configuration
    • Database Configuration
  • IKEv2 Configuration
  • SAML Configuration
  • Mobile Configuration
  • VPN Tunneling Configuration
  • PSAM Configuration
  • Telemetry Settings
  • Advanced Client Configuration
  • Advanced Networking Configuration
  • IF-MAP Federation
    • Overview
    • This Client
  • Log/Monitoring
    • Events to Log
    • Log Filters
    • Client Side Log
    • SNMP
    • Advanced Settings
  • Behavioral Analytics
• Network Host Administration
  • Introduction
  • Internal Port Configuration
  • External Port Configuration
  • Management Port Configuration
  • VLAN Ports Configuration
  • Routes Configuration
  • Hosts Configuration
  • VPN Tunnel Configuration
• Authentication and Directory Servers
  • Introduction
  • Configuring Authentication Servers
    • Configuring Local Authentication Server
    • Configuring ACE Authentication Server
    • Configuring RADIUS Authentication Server
    • Configuring Certificate Authentication Server
    • Configuring LDAP Authentication Server
    • Configuring SAML Authentication Server
    • Configuring TOTP Authentication Server
    • Configuring MDM Authentication Server
    • Configuring Active Directory Authentication Server
• Sign-in Policies
  • Introduction
  • Defining Authorization-Only Access Policies
  • Configuring Sign-In Pages
    • Configuring Standard Sign-In Pages
    • Custom Sign-In Pages
  • Sign-in Notifications
  • Sign-in SAML
    • SAML Metadata Provider
    • SAML Identity Provider
    • Configuring Peer SAML Service Provider Settings
• Using Endpoint Security
  • Managing ESAP Versions
    • Enabling the Active ESAP Package
  • Configuring Host Checker Policy
    • Checking for Third-Party Applications Using Predefined Rules
    • Specifying Customized Requirements Using Custom Rules
• Users Configuration
  • Configuring User Realm
  • Configuring User Role
  • Resource Profiles
    • Web Resource Profile
    • File Browsing
    • Terminal Services
    • Virtual Desktop
    • HTML5 Access
    • SAM Resource Profiles
    • Secure Mail
    • S/MIME Certificate
  • Resource Policies
  • Ivanti Secure Access Client Connections
    • Ivanti Secure Access Client Connection Set Options
    • Creating a Client Connection Set for Ivanti Connect Secure
    • Creating a Client Component Set for Ivanti Connect Secure
  • Enterprise Onboarding
    • Defining the SCEP Server
    • Defining CSR Templates
    • Defining VPN Profiles
    • Defining WiFi Profiles
    • Defining Certificate Profiles
    • Defining Secure Mail
• ICS Gateway Administration
  • Introduction
  • Viewing Admin Authentication Methods
  • Viewing Admin Authentication Policies
  • Creating Admin Rules and Admin Groups
    • Creating Admin Rules
    • Creating Admin Groups
  • Associating Admin Groups with Admin Roles
  • Workflow: Creating a Local Authentication Policy
  • Workflow: Creating a SAML Authentication Policy With Azure AD and SAML(Custom)
• Licensing/Subscriptions
• Using Troubleshooting Tools
  • Introduction
  • Using the Debug Log
  • Using Network Troubleshooting Commands
  • Using System Snapshots
  • Using the TCP Dump Utility

---