options to further restrict access to various portals within Ivanti EPMM.

This section includes the following topics:

Select the portal you want to enable.
Refer to 

Enter the IP address or network/mask pair to specify servers or networks that may access this component. Separate the entries with spaces.


You must use the expanded form of the mask. Do not

 specify an entry similar to 10.0.0.0/24.
If your Ivanti EPMM is behind a NAT, enter the IP of the NAT network.
Remember that the Sentry must be able to access Ivanti EPMM. If it does not have access, then the ActiveSync Devices page will not display devices.

The following table summarizes fields and descriptions in the 

Access Control Lists: ACLs

Access Control Lists: Portal ACLs

EmailPlusiOSGuide.ACATG

GlobalBookTitles.SSIG

Ivanti Sentry Guide for Ivanti Neurons for MDM

GlobalBookTitles.MSGC

GlobalBookTitles.MSG

Ivanti EPMM Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi

Ivanti Neurons for MDM Administrator Guide

GlobalBookTitles.CAG

GlobalBookTitles.DMG_

EmailPlusiOSGuide.AAWG

GlobalBookTitles.AAWG

GlobalBookTitles.TIGA

GlobalBookTitles.ACATG

GlobalBookTitles.EIGA

Ivanti On-Premise Installation Guide for Core and Enterprise Connector

GlobalBookTitles.OPIG

GlobalBookTitles.SSIG-Standalone-Sentry-Installation-Guide

GlobalBookTitles.MSGC-Sentry-Guide-for-Cloud

GlobalBookTitles.MSG-Sentry-Guide-for-Core

Core Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi-Core-Device-Management-Guide-for-iOS-and-macOS-Devices

GlobalBookTitles.CAG-Cloud-Administrator-Guide

GlobalBookTitles.DMG_-Core-Device-Management-Guide

GlobalBookTitles.AAWG-Core-Apps@Work-Guide

GlobalBookTitles.TIGA-Tunnel-for-iOS-Guide

GlobalBookTitles.ACATG-AppConnect-Guide-for-Core

incappticConnect.incapptic_Full

incapptic Connect 1.44.0 - 1.50.0 Release Notes

incappticConnect.Release_Notes_title

incappticConnect.Release_month,_year

GlobalBookTitles.EAGA

GlobalBookTitles_new.MSGC

Ivanti On-Premise Installation Guide for Ivanti EPMM and Enterprise Connector

GlobalBookTitles.OPIG-Ivanti-On-Premise-Installation-Guide-for-Ivanti-EPMM-and-Enterprise-Connector

Primary.Company

Ivanti EPMM Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA

GlobalBookTitles.TAGA

GlobalBookTitles_new.CAG

Primary.Product

GlobalBookTitles.MAG

GlobalBookTitles.GSCG

Primary.Product-Ivanti-Access-68-69

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Release Notes

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Release-Notes

GlobalBookTitles.DWIG

NewProdNames.Docs@Work

GlobalBookTitles.ACATG-Ivanti-AppConnect-Guide-for-EPMM

DocsAtWorkiOSGuide.AAWG

Ivanti EPMM Device Management Guide for iOS and macOS devices

GlobalBookTitles.DMGi-Ivanti-EPMM-Device-Management-Guide-for-iOS-and-macOS-devices

Ivanti Derived Credentials Guide for EPMM

GlobalBookTitles.DCG

GlobalBookTitles.MSG-Ivanti-Standalone-Sentry-Guide-for-EPMM

NewProdNames.Apps@Work

GlobalBookTitles_updated.DMG_

WebAtWorkForiOS.ACATG

GlobalBookTitles_updated.AAWG

GlobalBookTitles_updated.TIGA

GlobalBookTitles_updated.ACATG

GlobalBookTitles_updated.DMGi

GlobalBookTitles_updated.MSG

GlobalBookTitles_updated.MSGC

GlobalBookTitles_-_Copy.TIGA

Primary.Year

GlobalBookTitles.TAGA-Tunnel-for-Android-Guide

AppConnect for Android App Developers Guide

GlobalBookTitles.ACAD

Core Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA-Core-Device-Management-Guide-for-Android-and-Android-Enterprise-Devices

GlobalBookTitles.MSGC-Sentry-Guide-for-Ivanti-Neurons-for-MDM

DocsAtWorkAndroidGuide.ACATG

Primary.Year-2026

Ivanti Neurons for MDM Guide Administrator Guide

GlobalBookTitles.CAG-Ivanti-Neurons-for-MDM-Guide-Administrator-Guide

Primary.Product-Ivanti-Tunnel-4.20.0-for-Android-Guide

Mobile Threat Defense Solution Guide for Cloud

GlobalBookTitles.MTDcloud

Primary.Product-Ivanti-Tunnel-4.19.0-4.20.0

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Guide

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Guide

GlobalBookTitles.MAGAiOS

TunneliOSGuide.MSG

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Release Notes

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Release-Notes

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Guide

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Guide

Primary.Product-Tunnel-1.2.3

AppVPNTunnelForWindows12.MSG

incappticConnect.incapptic_Full-Ivanti-incapptic-Connect

Primary.Product-Ivanti-incapptic-Connect-1.44.0-1.50.0

Print.Guide

MI.product

EE.product

PrimaryMI.product

Primary.Product-Neurons-for-MDM-125

a list of users that you want to treat in the same way.

user group

a message or alert that is sent to the device. As per Apple, Push notifications to offline devices are based on APNs offline storage policy.

push notifications

a list of mobile apps you have made available for your users. Includes apps that users can download from public app stores and apps you intend to distribute using the device management system (In-house apps).

app catalog

collections of settings that you send to devices.

configurations

sets of requirements and compliance actions defined for devices.

policies

PrimaryMI.license2

an app distributed by the device management service rather than downloaded from a public app store.

in-house app

PrimaryMI.app

EE.app

PrimaryMI.license3

files that are published by and distributed to users.

content

a list of files that have been published by and distributed to users. A typical catalog might include sales presentations, images, spreadsheets, and documents.

content catalog

EE.license3

applications that are allowed on a device. A device that has other apps installed is considered out of compliance.

Allowlist apps

applications that are not approved for installation on a device. A device that has any of these apps installed is considered out of compliance.

Blockedlist apps

applications that must be installed on a device. A device that is missing any of these apps is considered out of compliance.

required apps

automated responses to a device that violates rules for managed devices.

compliance actions

PrimaryMI.license1

A third-party vendor translates this Administrator Guide into many languages. The accelerated release cadence of Ivanti Neurons for MDM means that sometimes there is a delay in publishing translated content. If your non-English Administrator Guide is out of date, please access the latest content in the English language by accessing the URL, http://[base Administrator Guide URL]/xx/all/en-us/LandingPage.htm, where [base Administrator Guide URL] is the address after http:// and before the latest Ivanti Neurons for MDM version number, and xx is the latest version number of Ivanti Neurons for MDM. For example, to access release 91 online help, the URL would be http://[base Administrator Guide URL]/91/all/en-us/LandingPage.htm.

If your language is unavailable

NewProdNames.Cloud

Ivanti Standalone Sentry 9.14.0 - 10.8.2 Release Notes

Primary.TitleLine

Advanced: Host Header Validation

EPMM System Manager Guide

System Manager Guide

Revision history

System Manager Overview

Starting System Manager

System Manager Workspace

Introducing System Manager

Settings overview

Network: Interfaces

Network: Routes

DNS and Hostname

Static Hosts

Date and Time (NTP)

Data Export: Splunk

Data Export: SysLog

Data Export: Reporting Database

Log Upload

SNMP

Email Settings

Port Settings

Services

Data Purge

System Settings

Security overview

Identity Source: Local Users

Identity Source: Password Policy

Certificates you configure in the System Manager

Generate a self-signed certificate

Certificate signing request (CSR) requirements

Generate a certificate signing request (CSR)

Upload client certificate (CSR) window

Uploading certificates

Cert pinning for in-app registrations for iOS and Android devices

Viewing certificates

Access Control Lists: Networks and Hosts

Certificate Mgmt

Access Control Lists: Network Services

Advanced: HSTS

Advanced: Incoming SSL Configuration

Advanced: Outgoing SSL Configuration

Advanced: ModSecurity

Advanced: SAML

Advanced: Trusted Front End

Advanced:  Portal Authentication

Advanced: SSH Configuration

Security Settings

Maintenance overview

Software updates

Export configuration

Import a configuration

Clear configuration

System Storage

Reboot

Optimize database

System backup

Maintenance Settings

Troubleshooting overview

Working with logs

Network monitor

Troubleshooting

Fields	Description
User Portal	Enables device users to register their devices, view device information, and manage their devices.
Admin Portal	The Admin Portal.
System Manager Portal	The System Manager.
Sentry Connection	The Sentry installed for ActiveSync access control.
API Connection	The Web Services API.
iOS MDM	The iOS MDM service for profile management.
iOS iReg URL	The iReg service that enables provisioning iOS devices without installing the MI Go app.
OAuth API	Enables or disables the OAuth API. You can control access to the OAuth API by defining IP addresses, ranges of IP addresses and subnets based on the values they enter into the field. Addresses can be internal (non-routable) or external (routable). With this control, you can limit access to OAuth API from routable IP addresses or restrict access to specific machines for security reasons.
App Storefront Connection	The app management service for iOS.

Access Control Lists: Portal ACLs

Enabling an ACL Portal

Portal ACLs window