Use Security > Advanced > ModSecurity to enable an additional layer of protection against future security vulnerabilities. ModSecurity is an open source web application firewall  (

). If certain types of public security vulnerabilities impact Ivanti EPMM in the future, Ivanti EPMM can notify customers to enable ModSecurity. In these cases, Ivanti EPMM will provide a URL of a rules file hosted by Ivanti. The file contains ModSecurity rules that protect Ivanti EPMM from security vulnerabilities and you can protect your Ivanti EPMM without upgrading to a new Ivanti EPMM release.

This section includes the following topics:

If a future public security vulnerability impacts Ivanti EPMM, Ivanti will contact you to do the following:

.
Enabling audit logging means any activity relating to the security vulnerability is logged.

Sometimes Ivanti will direct you to configure ModSecurity to detect a specific type of attack on Ivanti EPMM without performing any action to block it.

When you have enabled ModSecurity, or configured it in detection only mode, Ivanti EPMM logs related information.

The log files containing ModSecurity information are:

modsec_audit.log if you enabled ModSecurity

error_log.log if you configured ModSecurity in detection only mode

Advanced: Outgoing SSL Configuration

Advanced: ModSecurity

EmailPlusiOSGuide.ACATG

GlobalBookTitles.SSIG

Ivanti Sentry Guide for Ivanti Neurons for MDM

GlobalBookTitles.MSGC

GlobalBookTitles.MSG

Ivanti EPMM Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi

Ivanti Neurons for MDM Administrator Guide

GlobalBookTitles.CAG

GlobalBookTitles.DMG_

EmailPlusiOSGuide.AAWG

GlobalBookTitles.AAWG

GlobalBookTitles.TIGA

GlobalBookTitles.ACATG

GlobalBookTitles.EIGA

Ivanti On-Premise Installation Guide for Core and Enterprise Connector

GlobalBookTitles.OPIG

GlobalBookTitles.SSIG-Standalone-Sentry-Installation-Guide

GlobalBookTitles.MSGC-Sentry-Guide-for-Cloud

GlobalBookTitles.MSG-Sentry-Guide-for-Core

Core Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi-Core-Device-Management-Guide-for-iOS-and-macOS-Devices

GlobalBookTitles.CAG-Cloud-Administrator-Guide

GlobalBookTitles.DMG_-Core-Device-Management-Guide

GlobalBookTitles.AAWG-Core-Apps@Work-Guide

GlobalBookTitles.TIGA-Tunnel-for-iOS-Guide

GlobalBookTitles.ACATG-AppConnect-Guide-for-Core

incappticConnect.incapptic_Full

incapptic Connect 1.44.0 - 1.50.0 Release Notes

incappticConnect.Release_Notes_title

incappticConnect.Release_month,_year

GlobalBookTitles.EAGA

GlobalBookTitles_new.MSGC

Ivanti On-Premise Installation Guide for Ivanti EPMM and Enterprise Connector

GlobalBookTitles.OPIG-Ivanti-On-Premise-Installation-Guide-for-Ivanti-EPMM-and-Enterprise-Connector

Primary.Company

Ivanti EPMM Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA

GlobalBookTitles.TAGA

GlobalBookTitles_new.CAG

Primary.Product

GlobalBookTitles.MAG

GlobalBookTitles.GSCG

Primary.Product-Ivanti-Access-68-69

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Release Notes

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Release-Notes

GlobalBookTitles.DWIG

NewProdNames.Docs@Work

GlobalBookTitles.ACATG-Ivanti-AppConnect-Guide-for-EPMM

DocsAtWorkiOSGuide.AAWG

Ivanti EPMM Device Management Guide for iOS and macOS devices

GlobalBookTitles.DMGi-Ivanti-EPMM-Device-Management-Guide-for-iOS-and-macOS-devices

Ivanti Derived Credentials Guide for EPMM

GlobalBookTitles.DCG

GlobalBookTitles.MSG-Ivanti-Standalone-Sentry-Guide-for-EPMM

NewProdNames.Apps@Work

GlobalBookTitles_updated.DMG_

WebAtWorkForiOS.ACATG

GlobalBookTitles_updated.AAWG

GlobalBookTitles_updated.TIGA

GlobalBookTitles_updated.ACATG

GlobalBookTitles_updated.DMGi

GlobalBookTitles_updated.MSG

GlobalBookTitles_updated.MSGC

GlobalBookTitles_-_Copy.TIGA

Primary.Year

GlobalBookTitles.TAGA-Tunnel-for-Android-Guide

AppConnect for Android App Developers Guide

GlobalBookTitles.ACAD

Core Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA-Core-Device-Management-Guide-for-Android-and-Android-Enterprise-Devices

GlobalBookTitles.MSGC-Sentry-Guide-for-Ivanti-Neurons-for-MDM

DocsAtWorkAndroidGuide.ACATG

Primary.Year-2026

Ivanti Neurons for MDM Guide Administrator Guide

GlobalBookTitles.CAG-Ivanti-Neurons-for-MDM-Guide-Administrator-Guide

Primary.Product-Ivanti-Tunnel-4.20.0-for-Android-Guide

Mobile Threat Defense Solution Guide for Cloud

GlobalBookTitles.MTDcloud

Primary.Product-Ivanti-Tunnel-4.19.0-4.20.0

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Guide

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Guide

GlobalBookTitles.MAGAiOS

TunneliOSGuide.MSG

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Release Notes

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Release-Notes

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Guide

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Guide

Primary.Product-Tunnel-1.2.3

AppVPNTunnelForWindows12.MSG

incappticConnect.incapptic_Full-Ivanti-incapptic-Connect

Primary.Product-Ivanti-incapptic-Connect-1.44.0-1.50.0

Print.Guide

MI.product

EE.product

PrimaryMI.product

Primary.Product-Neurons-for-MDM-125

a list of users that you want to treat in the same way.

user group

a message or alert that is sent to the device. As per Apple, Push notifications to offline devices are based on APNs offline storage policy.

push notifications

a list of mobile apps you have made available for your users. Includes apps that users can download from public app stores and apps you intend to distribute using the device management system (In-house apps).

app catalog

collections of settings that you send to devices.

configurations

sets of requirements and compliance actions defined for devices.

policies

PrimaryMI.license2

an app distributed by the device management service rather than downloaded from a public app store.

in-house app

PrimaryMI.app

EE.app

PrimaryMI.license3

files that are published by and distributed to users.

content

a list of files that have been published by and distributed to users. A typical catalog might include sales presentations, images, spreadsheets, and documents.

content catalog

EE.license3

applications that are allowed on a device. A device that has other apps installed is considered out of compliance.

Allowlist apps

applications that are not approved for installation on a device. A device that has any of these apps installed is considered out of compliance.

Blockedlist apps

applications that must be installed on a device. A device that is missing any of these apps is considered out of compliance.

required apps

automated responses to a device that violates rules for managed devices.

compliance actions

PrimaryMI.license1

A third-party vendor translates this Administrator Guide into many languages. The accelerated release cadence of Ivanti Neurons for MDM means that sometimes there is a delay in publishing translated content. If your non-English Administrator Guide is out of date, please access the latest content in the English language by accessing the URL, http://[base Administrator Guide URL]/xx/all/en-us/LandingPage.htm, where [base Administrator Guide URL] is the address after http:// and before the latest Ivanti Neurons for MDM version number, and xx is the latest version number of Ivanti Neurons for MDM. For example, to access release 91 online help, the URL would be http://[base Administrator Guide URL]/91/all/en-us/LandingPage.htm.

If your language is unavailable

NewProdNames.Cloud

Ivanti Standalone Sentry 9.14.0 - 10.8.2 Release Notes

Advanced: ModSecurity

Enabling ModSecurity

Configuring Detection Only mode

Viewing ModSecurity logs