---
title: Adding ICS Gateway to NSA
slug: ps/help/en_us/ics/25x/vadep/adding-ics-gateway-to-nsa
createdAt: 2026-09-21T05:29:32.771Z
---

To add ICS Gateway, perform the following steps:

1. From the Ivanti Connect Secure menu, click the **Gateways** icon, then select **Gateways > Gateways List**.

:::Paragraph{indent="1"}
The All Gateways page is displayed.
:::

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/afoaI1gpI9BHxRMvnfWk4_gatewayslistoption575x218.png" position="flex-start" size="57" width="575" height="218" initialPath="img/gateways_list_option_575x218.png" githubPath="img/gateways_list_option_575x218.png" showCaption="false" indent="1"}

2. In the All Gateways page, click the **Add** drop-down list.

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/QHAWVXKc52-qdHtyW91sq_addgs515x81.png" position="flex-start" size="52" width="515" height="81" initialPath="img/add_gs_515x81.png" githubPath="img/add_gs_515x81.png" showCaption="false" indent="1"}

3. From the Gateway types list, select **ICS Gateway**.

:::Paragraph{indent="1"}
The Register ICS Gateway page is displayed.
:::

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/QTLtj_tAWviuivn6fcUMP_icsgr564x303.png" position="flex-start" size="56" width="564" height="303" initialPath="img/ics_gr_564x303.png" githubPath="img/ics_gr_564x303.png" showCaption="false" indent="1"}

4. Enter a unique name for ICS gateway.
5. Enter your Location details such as Country, State/Region, City, and then click **Register**.

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/j9u84-Kppt6_gJbgC-N3G_icsgrs597x318.png" position="flex-start" size="60" width="597" height="318" initialPath="img/ics_grs_597x318.png" githubPath="img/ics_grs_597x318.png" showCaption="false" indent="1"}

:::Paragraph{indent="1"}
The Registration Summary page contains the FQDN URL and Registration Key, which you need to enter in the ICS Gateway to complete the registration. See Completing Registration of a ICS Appliance.
:::

6. Click **Close**.

:::Paragraph{indent="1"}
The newly added ICS Gateway gets listed as “Unregistered” under ICS Gateways list.
:::

## Completing Registration with ICS

:::hint{type="info"}
We recommend you use NTP server to ensure the clocks are synchronized and features on Ivanti Neurons for Secure Access work properly.
:::

To complete registration with ICS:

1. Log in to the ICS as an Admin.
2. Select the **System > Configuration > Ivanti Neurons for Secure Access > Settings** tab.
3. Enter the Registration FQDN and Registration Code.

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/Y8xpzP3fRbnGj1slqx6CD_secureaccesssettings601x280.png" position="flex-start" size="60" width="601" height="280" initialPath="img/secure_access_settings_601x280.png" githubPath="img/secure_access_settings_601x280.png" showCaption="false" indent="1"}

4. Click Save Changes.

:::Paragraph{indent="1"}
The Status Information displays the Registration Status in green.
:::

## Checking the Current Gateway Version

To check the current version for a Gateway, and to apply an update:

1. Log into the nSA Controller as a Tenant Admin.
2. From the Ivanti Connect Secure menu, click the **Gateways** icon, then select **Gateways > Gateway List**.

:::Paragraph{indent="1"}
The All Gateways page appears, showing the full list of Gateway Groups and standalone Gateways currently configured on the Controller.
:::

3. Select the required Gateway from the list.

:::Paragraph{indent="1"}
The *Gateways Overview* page appears. The summary at the top of the page displays details pertaining to this Gateway, including the current version:
:::

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/bQcEQ7QPYy6bwFh0IKzRV_viewing826x324.png" position="flex-start" size="80" width="826" height="324" initialPath="img/viewing_826x324.png" githubPath="img/viewing_826x324.png" showCaption="false" indent="1"}

4. Click the context menu icon at the top-right to access the Edit options applicable to the selected Gateway:

## Frequently Asked Questions

**Q**: I am unable to connect to my backend resources through L3 VPN.

**Solution**: SNAT these packets to the Internal interface IP which belongs to a subnet within the VPC.

To NAT endpoint tunnel IP to Internal interface IP, do the following:

1. Log in to Ivanti Connect Secure admin console.
2. Navigate to **System > Network > VPN Tunneling**.
3. Enable Source NATTING. By default, **Source NATTING** is disabled.

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/xzojFlQk80Ca4nbTWRrTz_snat635x125.png" position="flex-start" size="64" width="635" height="125" initialPath="img/snat_635x125.png" githubPath="img/snat_635x125.png" showCaption="false" indent="1"}

**Q**: User not able to access ICS after installation.

**Solution**: Ensure that the port 443 is opened for ICS