--- title: Overview slug: isac/admin-guide/ios docTags: createdAt: 2026-08-03T06:47:15.403Z --- The [Ivanti Secure Access Client Mobile Supported Platforms Guide](https://www.ivanti.com/support/product-documentation#96), lists the mobile device OS versions supported by Ivanti Secure Access Client and the security features supported on each mobile device OS. The Ivanti Secure Access Client iOS app supports the following features: | | | | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | | ICS Features | Web Proxy (Proxy server in front of ICS) | | | Web Proxy (Proxy server behind ICS) | |   | Per-App VPN, with one VPN tunnel shared by all apps that need VPN (Layer 3). See [Mobile Device Management (MDM) Configuration](docId\:zzMqor9xZAhcNL6YqiZjM). | | | Per-App VPN SAM (Layer 4). See [Mobile Device Management (MDM) Configuration](docId\:zzMqor9xZAhcNL6YqiZjM). | | | Per-App VPN SAM (Layer 4) – multiple tunnels. See [Mobile Device Management (MDM) Configuration](docId\:zzMqor9xZAhcNL6YqiZjM). | | | On-demand per-app VPN (starts automatically as needed). See [Mobile Device Management (MDM) Configuration](docId\:zzMqor9xZAhcNL6YqiZjM) | | | Host Checker validation for VPN On-demand. See [Configuring Host Checker for iOS](docId\:zZyBQ-HcDqjlyuQtLq_w0). | | | Split Tunneling (IP-based). See [Split Tunneling](docId\:zzMqor9xZAhcNL6YqiZjM). | | | Split Tunneling (FQDN-based) - Layer 4. See [Fully Qualified Domain Name (FQDN) based Split Tunneling](docId\:zzMqor9xZAhcNL6YqiZjM). | | | Configurable DNS search order. See [VPN Tunneling Connection Profiles with Support for Multiple DNS Settings](docId\:zzMqor9xZAhcNL6YqiZjM) | | | Launch from Browser. | | | Always-On VPN. See [Always-on VPN](docId\:zzMqor9xZAhcNL6YqiZjM). | | | SSL VPN. See [VPN Tunneling](docId\:zzMqor9xZAhcNL6YqiZjM). | | | ESP VPN. See [VPN Tunneling](docId\:zzMqor9xZAhcNL6YqiZjM). | | | SSL VPN over IPv6. See [VPN Tunneling](docId\:zzMqor9xZAhcNL6YqiZjM). | | | ESP VPN over IPv6. See [VPN Tunneling](docId\:zzMqor9xZAhcNL6YqiZjM). | | | ESP VPN Mixed Mode (IPv4-in-IPv6 and IPv6-in-IPv4). See [VPN Tunneling](docId\:zzMqor9xZAhcNL6YqiZjM) | | | FIPS Compliance. See [FIPS Compliance](docId\:zzMqor9xZAhcNL6YqiZjM). | | | Configure VPN through MDM. See [Mobile Device Management (MDM) Configuration](docId\:zzMqor9xZAhcNL6YqiZjM). | | | **Authentication Features** | | | - SAML support. See [SAML Support](docId\:uSdt3Wt4hkMSlzlL560Eu). | | | - SAML Single Logout. See [SAML Single Logout](docId\:uSdt3Wt4hkMSlzlL560Eu) | | | - Smart Card | | | - RSA Token Code. See [RSA Token Code](docId\:uSdt3Wt4hkMSlzlL560Eu) | | | - RSA Soft-token Integration/Automation | | | - Time-based One-Time Password (ICS Only). See [Time-based One-Time Password (ICS Only)](docId\:uSdt3Wt4hkMSlzlL560Eu). | | | - Certificate Authentication. See [Certificate Authentication](docId\:uSdt3Wt4hkMSlzlL560Eu). | | | - Certificate Authentication with IKE and ESP | | | - Stealth Mode Tunnels ((Per-App VPN). See [Mobile Device Management (MDM) Configuration](docId\:zzMqor9xZAhcNL6YqiZjM). | | | - Secondary Authentication (not to IPS). See [Secondary Authentication (not to IPS)](docId\:uSdt3Wt4hkMSlzlL560Eu). | | | - Bio-metric authentication (touch-id / face id) | | | **Host Check Features** | | | - Minimal/OS Check support. See [Configuring Host Checker for iOS](docId\:zZyBQ-HcDqjlyuQtLq_w0). | | | - OS Version support. See [Configuring Host Checker for iOS](docId\:zZyBQ-HcDqjlyuQtLq_w0). | | | - Check whether jailbroken / rooted. See [Configuring Host Checker for iOS](docId\:zZyBQ-HcDqjlyuQtLq_w0). | | | - Let admin allow or ban particular OS versions. See [Configuring Host Checker for iOS](docId\:zZyBQ-HcDqjlyuQtLq_w0). | | | - VoD / Per-App VPN. See [Mobile Device Management (MDM) Configuration](docId\:zzMqor9xZAhcNL6YqiZjM). | | | - Enhanced Host Checker validation for ISAC connection (22.5.1). See [Host Checker Validation](docId\:zZyBQ-HcDqjlyuQtLq_w0). | | | **Other Features** | | | - Deploy from App Store. See [Installing Ivanti Secure Access Client for Apple iOS App](docId\:pVxeqOuVTgIGPXbks40kk). | | | - VPN Configuration. See [VPN Configuration](docId:8CxAAJgtu_7A83PGw1UpF). | | | - Device ID Validation (VoD and Per-App VPN) (22.4.1). See [Device ID Validation](docId:8CxAAJgtu_7A83PGw1UpF). | | | - Derived credential support (22.5.1). See [Derived Credential Support](docId:8CxAAJgtu_7A83PGw1UpF). | | | - Dark theme support (22.3.1). See [Dark Theme Support](docId:8CxAAJgtu_7A83PGw1UpF). | | | - Voice-over support. See [Voice Over Support](docId:8CxAAJgtu_7A83PGw1UpF). | | | - UI Mode switching (22.3.1). See [UI Mode Switching](docId:8CxAAJgtu_7A83PGw1UpF). | | | **Security Features** | | | - Server Certificate Trust Enforcement. | | | - HTTP-only Cookie | | | - Minimum Client Version Enforcement | | ZTA Features | NZTA Enrollment. See [Enrolling for nZTA Connections](docId:9RTwAQ8tdSitwB73f4ilW). | | | On Demand. See [On-Demand and Simultaneous Connection Handling](docId:9RTwAQ8tdSitwB73f4ilW). | |   | Multiple Tunnels. See [On-Demand and Simultaneous Connection Handling](docId:9RTwAQ8tdSitwB73f4ilW). | | | BlackCloud (mTLS) | | | Dynamic Policy Update and CARTA. See [Dynamic Policy Update and CARTA](docId:9RTwAQ8tdSitwB73f4ilW). | | | Transition from Classic to nZTA | | | Split Tunneling (IPv4 FQDN based app access). | | | SSL Tunnel Mode | | | **Authentication** | | | - SAML Authentication. See [Authentication Methods and Policies](docId:9RTwAQ8tdSitwB73f4ilW). | | | - Bio-metric Authentication | | | - Secondary Authentication. See [Authentication Methods and Policies](docId:9RTwAQ8tdSitwB73f4ilW). | | | - Certificate Revocation - server-side | | | **Host Check** | | | - OS Version Support | | | **Other Features** | | | Minimum Client Version Enforcement | | | Integrating NMDM with nZTA (22.6R1). See [Integrating NMDM with nZTA](docId:9RTwAQ8tdSitwB73f4ilW) | The following features are supported through nMDM: Workspace: enterprise data and apps separated from user data and apps, Data Separation, Email Configuration, Wi-Fi Configuration, Device Passcode Configuration, Device Security Configurations (e.g., Block camera), Wipe Enterprise Data, Reset Passcode, ARM 64-bit Binary Support, Session Failover, Dynamic Certificate Trust, and Device Wipe.