Overview
The Ivanti Secure Access Client Mobile Supported Platforms Guide, lists the mobile device OS versions supported by Ivanti Secure Access Client and the security features supported on each mobile device OS.
The Ivanti Secure Access Client iOS app supports the following features:
| |
|---|---|
ICS Features | Web Proxy (Proxy server in front of ICS) |
| Web Proxy (Proxy server behind ICS) |
| Per-App VPN, with one VPN tunnel shared by all apps that need VPN (Layer 3). See Mobile Device Management (MDM) Configuration. |
| Per-App VPN SAM (Layer 4). See Mobile Device Management (MDM) Configuration. |
| Per-App VPN SAM (Layer 4) – multiple tunnels. See Mobile Device Management (MDM) Configuration. |
| On-demand per-app VPN (starts automatically as needed). See Mobile Device Management (MDM) Configuration |
| Host Checker validation for VPN On-demand. See Configuring Host Checker for iOS. |
| Split Tunneling (IP-based). See Split Tunneling. |
| Split Tunneling (FQDN-based) - Layer 4. See Fully Qualified Domain Name (FQDN) based Split Tunneling. |
| Configurable DNS search order. See VPN Tunneling Connection Profiles with Support for Multiple DNS Settings |
| Launch from Browser. |
| Always-On VPN. See Always-on VPN. |
| SSL VPN. See VPN Tunneling. |
| ESP VPN. See VPN Tunneling. |
| SSL VPN over IPv6. See VPN Tunneling. |
| ESP VPN over IPv6. See VPN Tunneling. |
| ESP VPN Mixed Mode (IPv4-in-IPv6 and IPv6-in-IPv4). See VPN Tunneling |
| FIPS Compliance. See FIPS Compliance. |
| Configure VPN through MDM. See Mobile Device Management (MDM) Configuration. |
| Authentication Features |
| - SAML support. See SAML Support. |
| - SAML Single Logout. See SAML Single Logout |
| - Smart Card |
| - RSA Token Code. See RSA Token Code |
| - RSA Soft-token Integration/Automation |
| - Time-based One-Time Password (ICS Only). See Time-based One-Time Password (ICS Only). |
| - Certificate Authentication. See Certificate Authentication. |
| - Certificate Authentication with IKE and ESP |
| - Stealth Mode Tunnels ((Per-App VPN). See Mobile Device Management (MDM) Configuration. |
| - Secondary Authentication (not to IPS). See Secondary Authentication (not to IPS). |
| - Bio-metric authentication (touch-id / face id) |
| Host Check Features |
| - Minimal/OS Check support. See Configuring Host Checker for iOS. |
| - OS Version support. See Configuring Host Checker for iOS. |
| - Check whether jailbroken / rooted. See Configuring Host Checker for iOS. |
| - Let admin allow or ban particular OS versions. See Configuring Host Checker for iOS. |
| - VoD / Per-App VPN. See Mobile Device Management (MDM) Configuration. |
| - Enhanced Host Checker validation for ISAC connection (22.5.1). See Host Checker Validation. |
| Other Features |
| - Deploy from App Store. See Installing Ivanti Secure Access Client for Apple iOS App. |
| - VPN Configuration. See VPN Configuration. |
| - Device ID Validation (VoD and Per-App VPN) (22.4.1). See Device ID Validation. |
| - Derived credential support (22.5.1). See Derived Credential Support. |
| - Dark theme support (22.3.1). See Dark Theme Support. |
| - Voice-over support. See Voice Over Support. |
| - UI Mode switching (22.3.1). See UI Mode Switching. |
| Security Features |
| - Server Certificate Trust Enforcement. |
| - HTTP-only Cookie |
| - Minimum Client Version Enforcement |
ZTA Features | NZTA Enrollment. See Enrolling for nZTA Connections. |
| On Demand. See On-Demand and Simultaneous Connection Handling. |
| Multiple Tunnels. See On-Demand and Simultaneous Connection Handling. |
| BlackCloud (mTLS) |
| Dynamic Policy Update and CARTA. See Dynamic Policy Update and CARTA. |
| Transition from Classic to nZTA |
| Split Tunneling (IPv4 FQDN based app access). |
| SSL Tunnel Mode |
| Authentication |
| - SAML Authentication. See Authentication Methods and Policies. |
| - Bio-metric Authentication |
| - Secondary Authentication. See Authentication Methods and Policies. |
| - Certificate Revocation - server-side |
| Host Check |
| - OS Version Support |
| Other Features |
| Minimum Client Version Enforcement |
| Integrating NMDM with nZTA (22.6R1). See Integrating NMDM with nZTA |
The following features are supported through nMDM: Workspace: enterprise data and apps separated from user data and apps, Data Separation, Email Configuration, Wi-Fi Configuration, Device Passcode Configuration, Device Security Configurations (e.g., Block camera), Wipe Enterprise Data, Reset Passcode, ARM 64-bit Binary Support, Session Failover, Dynamic Certificate Trust, and Device Wipe.