 menu options contains menu items for configuring Ivanti EPMM access. The following table summarizes the tasks associated with each menu item.

Security overview

Identity Source: Local Users

Identity Source: Password Policy

EmailPlusiOSGuide.ACATG

GlobalBookTitles.SSIG

Ivanti Sentry Guide for Ivanti Neurons for MDM

GlobalBookTitles.MSGC

GlobalBookTitles.MSG

Ivanti EPMM Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi

Ivanti Neurons for MDM Administrator Guide

GlobalBookTitles.CAG

GlobalBookTitles.DMG_

EmailPlusiOSGuide.AAWG

GlobalBookTitles.AAWG

GlobalBookTitles.TIGA

GlobalBookTitles.ACATG

GlobalBookTitles.EIGA

Ivanti On-Premise Installation Guide for Core and Enterprise Connector

GlobalBookTitles.OPIG

GlobalBookTitles.SSIG-Standalone-Sentry-Installation-Guide

GlobalBookTitles.MSGC-Sentry-Guide-for-Cloud

GlobalBookTitles.MSG-Sentry-Guide-for-Core

Core Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi-Core-Device-Management-Guide-for-iOS-and-macOS-Devices

GlobalBookTitles.CAG-Cloud-Administrator-Guide

GlobalBookTitles.DMG_-Core-Device-Management-Guide

GlobalBookTitles.AAWG-Core-Apps@Work-Guide

GlobalBookTitles.TIGA-Tunnel-for-iOS-Guide

GlobalBookTitles.ACATG-AppConnect-Guide-for-Core

incappticConnect.incapptic_Full

incapptic Connect 1.44.0 - 1.50.0 Release Notes

incappticConnect.Release_Notes_title

incappticConnect.Release_month,_year

GlobalBookTitles.EAGA

GlobalBookTitles_new.MSGC

Ivanti On-Premise Installation Guide for Ivanti EPMM and Enterprise Connector

GlobalBookTitles.OPIG-Ivanti-On-Premise-Installation-Guide-for-Ivanti-EPMM-and-Enterprise-Connector

Primary.Company

Ivanti EPMM Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA

GlobalBookTitles.TAGA

GlobalBookTitles_new.CAG

Primary.Product

GlobalBookTitles.MAG

GlobalBookTitles.GSCG

Primary.Product-Ivanti-Access-68-69

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Release Notes

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Release-Notes

GlobalBookTitles.DWIG

NewProdNames.Docs@Work

GlobalBookTitles.ACATG-Ivanti-AppConnect-Guide-for-EPMM

DocsAtWorkiOSGuide.AAWG

Ivanti EPMM Device Management Guide for iOS and macOS devices

GlobalBookTitles.DMGi-Ivanti-EPMM-Device-Management-Guide-for-iOS-and-macOS-devices

Ivanti Derived Credentials Guide for EPMM

GlobalBookTitles.DCG

GlobalBookTitles.MSG-Ivanti-Standalone-Sentry-Guide-for-EPMM

NewProdNames.Apps@Work

GlobalBookTitles_updated.DMG_

WebAtWorkForiOS.ACATG

GlobalBookTitles_updated.AAWG

GlobalBookTitles_updated.TIGA

GlobalBookTitles_updated.ACATG

GlobalBookTitles_updated.DMGi

GlobalBookTitles_updated.MSG

GlobalBookTitles_updated.MSGC

GlobalBookTitles_-_Copy.TIGA

Primary.Year

GlobalBookTitles.TAGA-Tunnel-for-Android-Guide

AppConnect for Android App Developers Guide

GlobalBookTitles.ACAD

Core Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA-Core-Device-Management-Guide-for-Android-and-Android-Enterprise-Devices

GlobalBookTitles.MSGC-Sentry-Guide-for-Ivanti-Neurons-for-MDM

DocsAtWorkAndroidGuide.ACATG

Primary.Year-2026

Ivanti Neurons for MDM Guide Administrator Guide

GlobalBookTitles.CAG-Ivanti-Neurons-for-MDM-Guide-Administrator-Guide

Primary.Product-Ivanti-Tunnel-4.20.0-for-Android-Guide

Mobile Threat Defense Solution Guide for Cloud

GlobalBookTitles.MTDcloud

Primary.Product-Ivanti-Tunnel-4.19.0-4.20.0

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Guide

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Guide

GlobalBookTitles.MAGAiOS

TunneliOSGuide.MSG

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Release Notes

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Release-Notes

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Guide

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Guide

Primary.Product-Tunnel-1.2.3

AppVPNTunnelForWindows12.MSG

incappticConnect.incapptic_Full-Ivanti-incapptic-Connect

Primary.Product-Ivanti-incapptic-Connect-1.44.0-1.50.0

Print.Guide

MI.product

EE.product

PrimaryMI.product

Primary.Product-Neurons-for-MDM-125

a list of users that you want to treat in the same way.

user group

a message or alert that is sent to the device. As per Apple, Push notifications to offline devices are based on APNs offline storage policy.

push notifications

a list of mobile apps you have made available for your users. Includes apps that users can download from public app stores and apps you intend to distribute using the device management system (In-house apps).

app catalog

collections of settings that you send to devices.

configurations

sets of requirements and compliance actions defined for devices.

policies

PrimaryMI.license2

an app distributed by the device management service rather than downloaded from a public app store.

in-house app

PrimaryMI.app

EE.app

PrimaryMI.license3

files that are published by and distributed to users.

content

a list of files that have been published by and distributed to users. A typical catalog might include sales presentations, images, spreadsheets, and documents.

content catalog

EE.license3

applications that are allowed on a device. A device that has other apps installed is considered out of compliance.

Allowlist apps

applications that are not approved for installation on a device. A device that has any of these apps installed is considered out of compliance.

Blockedlist apps

applications that must be installed on a device. A device that is missing any of these apps is considered out of compliance.

required apps

automated responses to a device that violates rules for managed devices.

compliance actions

PrimaryMI.license1

A third-party vendor translates this Administrator Guide into many languages. The accelerated release cadence of Ivanti Neurons for MDM means that sometimes there is a delay in publishing translated content. If your non-English Administrator Guide is out of date, please access the latest content in the English language by accessing the URL, http://[base Administrator Guide URL]/xx/all/en-us/LandingPage.htm, where [base Administrator Guide URL] is the address after http:// and before the latest Ivanti Neurons for MDM version number, and xx is the latest version number of Ivanti Neurons for MDM. For example, to access release 91 online help, the URL would be http://[base Administrator Guide URL]/91/all/en-us/LandingPage.htm.

If your language is unavailable

NewProdNames.Cloud

Ivanti Standalone Sentry 9.14.0 - 10.8.2 Release Notes

Primary.TitleLine

EPMM System Manager Guide

System Manager Guide

Revision history

System Manager Overview

Starting System Manager

System Manager Workspace

Introducing System Manager

Settings overview

Network: Interfaces

Network: Routes

DNS and Hostname

Static Hosts

Date and Time (NTP)

Data Export: Splunk

Data Export: SysLog

Data Export: Reporting Database

Log Upload

SNMP

Email Settings

Port Settings

Services

Data Purge

System Settings

Certificates you configure in the System Manager

Generate a self-signed certificate

Certificate signing request (CSR) requirements

Generate a certificate signing request (CSR)

Upload client certificate (CSR) window

Uploading certificates

Cert pinning for in-app registrations for iOS and Android devices

Viewing certificates

Access Control Lists: Networks and Hosts

Certificate Mgmt

Access Control Lists: Network Services

Access Control Lists: ACLs

Access Control Lists: Portal ACLs

Advanced: Host Header Validation

Advanced: HSTS

Advanced: Incoming SSL Configuration

Advanced: Outgoing SSL Configuration

Advanced: ModSecurity

Advanced: SAML

Advanced: Trusted Front End

Advanced:  Portal Authentication

Advanced: SSH Configuration

Security Settings

Maintenance overview

Software updates

Export configuration

Import a configuration

Clear configuration

System Storage

Reboot

Optimize database

System backup

Maintenance Settings

Troubleshooting overview

Working with logs

Network monitor

Service diagnosis

System monitor

Queue Activation

In-Memory Queue Monitor

Troubleshooting

Upgrading overview

Upgrading Ivanti EPMM Releases

Settings Menu	Task
Identity Source > Local Users	Create, delete, and manage local users for System Manager.
Identity Source > Password Policy	Set the password requirements for System Manager local users.
Certificate Mgmt	View and manage certificates for: Portal HTTPS Client TLS iOS Enrollment
Access Control Lists > Networks & Hosts	Create and manage entries for networks and hosts
Access Control Lists > Network Services	Create and manage entries for network services
Access Control Lists > ACLs	Compile access control lists
Access Control Lists > Portal ACLs	Compile access control lists for specific Ivanti EPMM components
Advanced settings - Most configurations do not require changing the following settings.
Advanced > Host Header Validation	Enhances the security of HTTP traffic
Advanced > HSTS	Configure HTTP Strict Transport Security
Advanced > Incoming SSL Configuration	Select protocols and cipher suites other than the defaults for incoming SSL/TLS connections
Advanced > ModSecurity	Configure protection against certain types of future public security vulnerabilities
Advanced > Outgoing SSL Configuration	Select protocols and cipher suites other than the defaults for outgoing SSL/TLS connections.
Advanced > Outgoing SSL Configuration	Select protocols and cipher suites other than the defaults for outgoing SSL/TLS connections.
Advanced > SAML	Allow local administrator users to use single-sign on for the Admin Portal and self-service user portal. This feature also allows administrators to automatically redirect authentication for the Admin Portal and the user portal to your external Identity Provider (IdP).
Advanced > Trusted Front End	Configure a Trusted Front End between devices and Ivanti EPMM.
Advanced > Admin/Self-Service User Portal Authentication	Select whether device users authenticate to the user portal, and whether administrators authenticate to the Admin Portal, with a password, a certificate, or either.
Advanced > SSH Configuration	Configure SSH to enable Public Key Authentication and Password Authentication.