DATA SHEET

Data Protection with Always-On
VPN and Lockdown ModeOverviewHighlights■ Keep corporate data safe and secure withsimplified end user experience.
■ Prevent end users from circumventingsecure connections.
■ Navigate captive portals while ensuring dataprotection.
■ Maintain data visibility■ to adhere to compliance standards.
■ Supported on Windows, and macOS.

Industry and compliance■ Healthcare L HIPAA, HITECH■ Financial: GLBA, FFIEC, PCI-DSS■ Federal: FIPS, DoDIN APL, NDcPP■ General: OSHA, SOX, GDPR

ivanti.com

Industries such as financial services, health care andpharmaceuticals need solid security to ensure data
safety and industry compliance. Ensuring the securityof corporate data on laptops is key, as workforces
become increasingly mobile. Not complying withindustry regulations, like PCI-DSS and HIPAA, cancause setbacks like fines, lengthened product andservice timelines or legal liability.
Ivanti Secure offers Always-On VPN and Lockdown
Mode for compliance-focused businesses. Thesefeatures protect all network traffic; from your team’s
laptops at home to your corporate network, Ivanti
helps reduce the possibility of data loss or leakage.

makes a secure connection to the Ivanti Connect
Secure gateway. Once connected, all traffic from thelaptop is sent via a protected tunnel. Furthermore,
the end user will remain constantly connected to thetunnel, ensuring that data-in-motion remains secure.

Lockdown mode
Network administrators can configure the desktop
client to protect profiles from end user changes, suchas disconnecting from gateway or modifying anysettings. Lockdown mode secures data, making sureit does not leave an end user’s laptop unprotected.
This is especially important for teams embracing theEverywhere Workplace.
With lockdown mode, data can only be sent or

Always-On VPN
When an end user logs into their laptop using ourAlways-On VPN, our desktop client automaticallyreceived when the device is connected to the Connect
Secure gateway. (If a connection to Connect Secure isunavailable, data will remain safely on the end user’s
device until one is.) When Always-On is enabled, yoursure it does not leave an end user’s laptop
unprotected. This is especially important for teams
embracing the Everywhere Workplace.

User experience
When lockdown mode is enabled, users are required toconnect to a VPN to access the internet. Our desktop

With lockdown mode, data can only be sent orclient has the intelligence to recognize a captive

ivanti.com

received when the device is connected to the Connect

portal and enables the user to enter the necessary

1 800 982 2130

Secure gateway. (If a connection to Connect Secure isinformation so a secure internet connection can beunavailable, data will remain safely on the end user’s

established.

device until one is.) When Always-On is enabled, yourteam remains constantly connected to the VPN tunnel,
keeping sensitive data-in-motion secure.

User credentials can also be saved, or certificateauthentication can be used, to get your teamconnected faster. Both multi-factor authentication andmachined-based authentication are supported to allow
system updates on individual devices prior to users
logging in.

Copyright © 2021, Ivanti. All rights reserved. IVI-2513 4/21 SP

sales@ivanti.com