Adding ICS Gateway to NSA

To add ICS Gateway, perform the following steps:

From the Ivanti Connect Secure menu, click the Gateways icon, then select Gateways > Gateways List.

The All Gateways page is displayed.

In the All Gateways page, click the Add drop-down list.

From the Gateway types list, select ICS Gateway.

The Register ICS Gateway page is displayed.

Enter a unique name for ICS gateway.

Enter your Location details such as Country, State/Region, City, and then click Register.

The Registration Summary page contains the FQDN URL and Registration Key, which you need to enter in the ICS Gateway to complete the registration. See Completing Registration of a ICS Appliance.

Click Close.

The newly added ICS Gateway gets listed as “Unregistered” under ICS Gateways list.

Completing Registration with ICS

We recommend you use NTP server to ensure the clocks are synchronized and features on Ivanti Neurons for Secure Access work properly.

To complete registration with ICS:

Select the System > Configuration > Ivanti Neurons for Secure Access > Settings tab.

Enter the Registration FQDN and Registration Code.

Click Save Changes.

The Status Information displays the Registration Status in green.

Checking the Current Gateway Version

To check the current version for a Gateway, and to apply an update:

Log into the nSA Controller as a Tenant Admin.

From the Ivanti Connect Secure menu, click the Gateways icon, then select Gateways > Gateway List.

The All Gateways page appears, showing the full list of Gateway Groups and standalone Gateways currently configured on the Controller.

Select the required Gateway from the list.

The Gateways Overview page appears. The summary at the top of the page displays details pertaining to this Gateway, including the current version:

Click the context menu icon at the top-right to access the Edit options applicable to the selected Gateway:

Frequently Asked Questions

Q: I am unable to connect to my backend resources through L3 VPN.

Solution: SNAT these packets to the Internal interface IP which belongs to a subnet within the VPC.

To NAT endpoint tunnel IP to Internal interface IP, do the following:

Navigate to System > Network > VPN Tunneling.

Enable Source NATTING. By default, Source NATTING is disabled.

Q: User not able to access ICS after installation.

Solution: Ensure that the port 443 is opened for ICS