---
title: Security overview
slug: epmm/system-manager-guide/security-overview
createdAt: 2026-10-06T07:58:36.334Z
---

System Manager **Security** menu options contains menu items for configuring Ivanti EPMM access. The following table summarizes the tasks associated with each menu item.

Table: Security Menu Items

| Settings Menu                                                                           | Task                                                                                                                                                                                                                                                                         |
| --------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Identity Source > Local Users                                                           | Create, delete, and manage local users for System Manager.                                                                                                                                                                                                                   |
| Identity Source > Password Policy                                                       | Set the password requirements for System Manager local users.                                                                                                                                                                                                                |
| Certificate Mgmt                                                                        | View and manage certificates for:<br />- Portal HTTPS<br />- Client TLS<br />- iOS Enrollment                                                                                                                                                                                |
| Access Control Lists > Networks & Hosts                                                 | Create and manage entries for networks and hosts                                                                                                                                                                                                                             |
| Access Control Lists > Network Services                                                 | Create and manage entries for network services                                                                                                                                                                                                                               |
| Access Control Lists > ACLs                                                             | Compile access control lists                                                                                                                                                                                                                                                 |
| Access Control Lists > Portal ACLs                                                      | Compile access control lists for specific Ivanti EPMM components                                                                                                                                                                                                             |
| Advanced settings - Most configurations do not require changing the following settings. |                                                                                                                                                                                                                                                                              |
| Advanced > Host Header Validation                                                       | Enhances the security of HTTP traffic                                                                                                                                                                                                                                        |
| Advanced > HSTS                                                                         | Configure HTTP Strict Transport Security                                                                                                                                                                                                                                     |
| Advanced > Incoming SSL Configuration                                                   | Select protocols and cipher suites other than the defaults for incoming SSL/TLS connections                                                                                                                                                                                  |
| Advanced > ModSecurity                                                                  | Configure protection against certain types of future public security vulnerabilities                                                                                                                                                                                         |
| Advanced > Outgoing SSL Configuration                                                   | Select protocols and cipher suites other than the defaults for outgoing SSL/TLS connections.                                                                                                                                                                                 |
| Advanced > Outgoing SSL Configuration                                                   | Select protocols and cipher suites other than the defaults for outgoing SSL/TLS connections.                                                                                                                                                                                 |
| Advanced > SAML                                                                         | Allow local administrator users to use single-sign on for the Admin Portal and self-service user portal. This feature also allows administrators to automatically redirect authentication for the Admin Portal and the user portal to your external Identity Provider (IdP). |
| Advanced > Trusted Front End                                                            | Configure a Trusted Front End between devices and Ivanti EPMM.                                                                                                                                                                                                               |
| Advanced > Admin/Self-Service User Portal Authentication                                | Select whether device users authenticate to the user portal, and whether administrators authenticate to the Admin Portal, with a password, a certificate, or either.                                                                                                         |
| Advanced > SSH Configuration                                                            | Configure SSH to enable Public Key Authentication and Password Authentication.                                                                                                                                                                                               |