DATASHEET

Ivanti Neurons for Secure Access
Overview

Is your multi-node VPN deployment
giving you a headache?

Ivanti Neurons for Secure Access delivers

With the rise of the work from home revolution,

centralized management and analytics frommany organizations greatly increased their Ivanti

the cloud for Ivanti Connect Secure (ICS) VPN

Connect Secure VPN footprint to keep up with thegateways. Its unified interface controls an

demand of their users in the Everywhere Workplace.

entire ICS deployment, greatly reducing theWhile increased connectivity for users is a goodtime, complexity and risks of managing

thing, increased operational overhead for

multi-node VPN deployments. Risky or

administrators is not.

anomalous user behavior is addressedwith automated remediation while collated

Large deployments can create complexity

gateway logs and customizable reports deliver

As your organization continues to grow, you needactionable insights. Neurons for Secure Accessa way to make managing your entire VPN gateway

minimizes overhead and maintains a secure

deployment easier, not harder. You need a way toenvironment to maximize the value of your VPN.

quickly at-a-glance ensure all your gateways arehealthy, up-to-date and operating nominally. You alsoneed a way to easily implement configuration changes
across the deployment without the hassle of signing
into multiple UIs, and you need the visibility into all
your users’ activity, no matter when and where they
are connecting to your network.

Signs you need a better management tool:■ You spend hours uploading and deploying the same

update across all your VPN gateways■ A “minor configuration change” take hours toimplement across multiple gateway UIs■ You have an entire browser favorites bar devoted togateway login pages■ You reach for your spreadsheets every timesomebody asks for you to run a VPN activity reportacross multiple regions

Ivanti Neurons for Secure Access can help
Ivanti Neurons for Secure Access cures the multi-node
VPN headache. No longer will you need to sign into
multiple gateways to update a single policy, or manuallycombine data logs in a spreadsheet, nor upload thesame upgrade package to each individual gateway.
Neurons for Secure Access gives you full configuration,complete gateway lifecycle management including
one-click upgrades, user behavioral analytics, collated
logs and troubleshooting, all from a single cloud hostedmanager.

ivanti.com

How It Works
Ivanti Neurons for Secure Access is a SaaS-delivered, centralized
management and reporting platform for Ivanti Connect Secure(ICS) VPN gateways. It provides a unified interface allowing security
admins to centrally manage their entire ICS gateway deployments
quickly and efficiently.

Ivanti Neurons for Secure AccessCloud-based

Ivanti Neurons for Secure Access simplifies workflows and savesadministrators time by consolidating all gateway configuration, logging,reporting and activity data to a single pane of glass, eliminating the needto make changes on individual gateways. Admins can easily replicate
configurations across gateways, enabling administrators to easily configure
new gateways deployed into their environment. Gateway lifecycle
management includes the ability to upgrade or rollback gateways, clusters
or groups of gateways with a single click, vastly reducing the amount oftime and effort required to deploy updates across the VPN deployment.
Administrators also have access to analytics and troubleshooting tools
to review the security and health status of their entire VPN deployment
as part of their daily routine. With application discovery, administrators
can track application access across the VPN, track usage metrics andsee application access trends. Scheduled reports let admins design,
customize and automate reports to arrive in their inbox with theexact data they want to see.
Neurons for Secure Access features actionable user risk assessment
through User Entity Behavioral Analytics (UEBA), where attributes for every
active VPN session are monitored and assessed for risky, suspicious oranomalous user behavior and assigned a risk score. Actionable insights
allow administrators to configure automated remediation of risky userbehavior, such as enforcing secondary authentication or quarantining theclient for further administrative review.
Neurons for Secure Access is hosted entirely in Microsoft Azure. There is
no local software or appliances to install. Adding an ICS VPN gateway to
Neurons for Secure Access is as easy as copying a registration code andFull VPN configuration management
Gateway lifecycle management
End-to-end visibility and automation
Actionable security analytics

User Database

Cloud ICS
Gateway

On-Prem ICS
Gateway

End User Device

Data Center

URL into the new gateway and clicking join.

Ivanti Neurons for Secure Access | DATASHEET

2

Feature

Secure Access
Foundation

Gateway Lifecycle
ManagementDescription■ Full management of Ivanti Connect Secure VPN gateways.
■ Centralized visibility and compliance reporting of users, devices, applications andinfrastructure across the enterprise.

■ Cloud hosted in Microsoft Azure with no local software or appliances to install.
■ Upgrade your VPN infrastructure at your own pace.
■ Enables centralized upgrades, downgrades and restarts.
■ “Single click” upgrade experience.
■ Group and cluster upgrades supported.
■ Full suite of gateway node monitoring and troubleshooting tools.
(e.g. ping, traceroute, pcap, nslookup, system snapshots)

Configuration
Management

Extensibility withThird-Party Integration■ Full centralized gateway configuration management.
■ “Lift and shift” configurations between gateways with configuration templates.
■ Configuration groups for multi-node configuration management.
■ Rest APIs for 3rd party application integration. (IDP, SIEM, UEM, vulnerability
assessment and endpoint protection)■ Proprietary user behavioral analysis to identify risky or anomalous user activity.
■ Automate responses to elevated risk.
User Entity Behavior
Analytics (UEBA)■ Warn user of elevated risk.
■ Force secondary authentication.
■ Deny subsequent logins with warning message.
■ Disconnect / disable user access with warning message.

Application Discovery■ L3, L4 and L7 Application access visibility■ Application Access trends■ Application Usage Metrics

Custom Scheduled
ReportingHybrid Configuration
Support■ Build custom reports from collated gateway logs then email them out on a defined schedule.

■ Build custom reports from collated gateway logs then email them out on a defined schedule.
■ Supports physical, virtual or cloud Ivanti Connect Secure VPN gateways.
■ Supports both Ivanti ISA and PSA series VPN gateways.
■ Co-exists with Ivanti Neurons for Zero Trust Access deployments.

Copyright © 2022, Ivanti. All rights reserved. IVI-2633 09/22 MM/FG

ivanti.com
1 800 982 2130
sales@ivanti.com