Before You Begin

2 min

Before you begin configuring Ivanti Secure Access Client, be sure that you have already configured Connect Secure server network settings. Also, be sure that you have defined the Authentication settings, including the authentication servers and sign-in settings. The Authentication and Host Checker settings can directly affect a Ivanti Secure Access Client installation because you can define the conditions that an endpoint must meet to be allowed access to protected resources.

Before you configure support for Apple iOS devices with Connect Secure, keep in mind the following client software behaviors:

With Wi-Fi connectivity, Ivanti Secure Access Client reconnects the VPN tunnel automatically when the user wakes up the device. With 3G connectivity, the VPN reconnects when the user generates network traffic using an application like Safari or Mail.

Establishing the VPN tunnel through a proxy is supported (regardless of the split tunnel mode), except for proxies that require authentication credentials.

Static host mapping is not created for the server/proxy hostname.

DNS considerations:

When split tunneling is set to Split tunneling disabled with access to local subnet, Ivanti Secure Access Client uses the DNS servers that are configured on the Ivanti server.

When split tunneling is set to Split tunneling enabled, DNS servers that are configured on the Ivanti server are used only for hostnames within the Connect Secure domains.

Session scripts are not supported.

Web-based installation from an Ivanti gateway is not supported.

Session timeout reminders are not supported.

When you use client certificate authentication, and the user is enabled to select from among assigned roles, the user is prompted to enter the role name instead of being presented with a list of roles.

To ensure that users see consistent bookmarks in the Ivanti Secure Access Client UI no matter which server they are connected to, you can configure and enable user record synchronization, a feature of the Connect Secure platform.