Ivanti Neurons for Secure Access

Welcome to Ivanti Neurons for Secure Access (nSA)

Welcome to Ivanti Neurons for Secure Access, your cloud-based platform for unified network security management. This empowers you with continuous visibility, helping you proactively defend against evolving threats and accelerate IT productivity.

Is your multi-node VPN deployment giving you a headache?

With the rise of the work from home revolution, many organizations greatly increased their Ivanti Connect Secure VPN footprint to keep up with the demand of their remote users. While increased connectivity for users is a good thing, increased operational overhead for administrators is not.

Large Deployments Can Create Complexity

As your organization continues to grow, you need a way to make managing your entire VPN gateway deployment easier, not harder. You need a way to quickly ensure all your gateways are healthy, up-to-date and operating optimally, at-a-glance. You also need a way to easily implement configuration changes across the deployment without the hassle of signing into multiple UIs, and you need the visibility into all your users’ activity, no matter when and where they are connecting to your network.

Overview

Ivanti Neurons for Secure Access delivers centralized management and analytics from the cloud for Ivanti Connect Secure (ICS) VPN gateways. Its unified interface controls an entire ICS deployment, greatly reducing the time, complexity and risks of managing multi-node VPN deployments. Risky or anomalous user behavior is addressed with automated remediation while collated gateway logs and customizable reports deliver actionable insights. Neurons for Secure Access minimizes overhead and maintains a secure environment to maximize the value of your VPN.

Signs you need a better management tool

• You spend hours uploading and deploying the same update across all your VPN gateways.

• A minor configuration change takes hours to implement across multiple gateway UIs.

• You have an entire browser favorites bar devoted to gateway login pages.

• You reach for your spreadsheets every time someone asks you to run a VPN activity report across multiple regions.

Ivanti Neurons for Secure Access Can Help

Ivanti Neurons for Secure Access cures the multi-node VPN headache. No longer will you need to sign into multiple gateways to update a single policy, manually combine data logs in a spreadsheet, or upload the same upgrade package to each individual gateway. Neurons for Secure Access gives you full configuration, complete gateway lifecycle management including one-click upgrades, user behavioral analytics, and collated logs and troubleshooting, all from a single cloud-hosted management platform.

How It Works

_{Figure: Ivanti Neurons for Secure Access deployment overview.}

Ivanti Neurons for Secure Access is a SaaS-delivered, centralized management and reporting platform for Ivanti Connect Secure (ICS) VPN gateways. It provides a unified interface allowing security admins to centrally manage their entire ICS gateway deployments quickly and efficiently.

Ivanti Neurons for Secure Access simplifies workflows and saves administrators time by consolidating all gateway configuration, logging, reporting and activity data to a single pane of glass, eliminating the need to make changes on individual gateways. Admins can easily replicate configurations across gateways, enabling administrators to easily configure new gateways deployed into their environment. Gateway lifecycle management includes the ability to upgrade or rollback gateways, clusters or groups of gateways with a single click, vastly reducing the amount of time and effort required to deploy updates across the VPN deployment.

Administrators also have access to analytics and troubleshooting tools to review the security and health status of their entire VPN deployment as part of their daily routine. With application discovery, administrators can track application access across the VPN, track usage metrics and see application access trends. Scheduled reports enable admins to design, customize and automate reports to arrive in their inbox with the exact data they want to see.

Neurons for Secure Access features actionable user risk assessment through User and Entity Behavior Analytics (UEBA), where attributes for every active VPN session are monitored and assessed for risky, suspicious or anomalous behavior and assigned a risk score. Actionable insights allow administrators to configure automated remediation of risky user behavior, such as enforcing secondary authentication or quarantining the client for further administrative review.

Neurons for Secure Access is hosted entirely in Microsoft Azure. There is no local software or appliances to install. Adding an ICS VPN gateway to Neurons for Secure Access is as easy as copying a registration code and URL into the new gateway and clicking join.

Feature Summary

Feature	Description
External Integrity Checker Tool (ICT)	Scans from nSA to single or multiple gateways with a single click. Security utility designed to verify the integrity of key files and system components. Detects unauthorized changes, corruption, or tampering. Aids in identifying potential compromises or anomalies by comparing files against known good baselines. Enables faster response to threats and maintaining system trustworthiness. Provides an alert if there is an anomaly in the executed ICT on a gateway. Enables admins to select a version-specific ICT package, execute against one or multiple ICS gateways, and view the results on the same page where the ICT is executed.
Advanced HTML5 Feature License Management	Enables organizations to control and audit the web technologies available to users or developers. Managing HTML feature licenses provides cost, legal, security, and operational benefits.
Secure Access Foundation	Full management of Ivanti Connect Secure VPN gateways. Centralized visibility and compliance reporting of users, devices, applications and infrastructure across the enterprise. Cloud hosted in Microsoft Azure with no local software or appliances to install. Upgrade your VPN infrastructure at your own pace.
Gateway Lifecycle Management	Enables centralized upgrades, downgrades and restarts. Single-click upgrade experience. Group and cluster upgrades supported. Full suite of gateway node monitoring and troubleshooting tools, including ping, traceroute, pcap, nslookup and system snapshots.
Configuration Management	Fully centralized gateway configuration management. Provides enhanced configuration backup and restore capabilities for managed ICS gateways. Administrators can back up gateway configurations and restore them when required, simplifying operational recovery and configuration management. Configuration synchronization for multi-node configuration management.
User and Entity Behavior Analytics (UEBA)	Proprietary user behavior analysis to identify risky or anomalous user activity and automate responses to elevated risk. Actions include warning the user of elevated risk, forcing secondary authentication, denying subsequent logins with a warning message, or disconnecting / disabling user access with a warning message.
nSA Syslog Server Integration	Enables configuration of an external syslog server to forward ICS gateway logs and nSA tenant admin logs. Provides centralized and secure log management and enhanced visibility into the health and efficiency of services running in ICS gateways.
Offline Alerts Notifications	Tenant admin can configure alerts with user email IDs to identify where notifications are sent.
Application Discovery	L3, L4 and L7 application access visibility. Application access trends. Application usage metrics.
Custom Scheduled Reporting	Builds custom reports from collated gateway logs then emails them out on a defined schedule.
Hybrid Configuration Support	Builds custom reports from collated gateway logs then emails them out on a defined schedule. Supports physical, virtual or cloud Ivanti Connect Secure VPN gateways. Supports Ivanti ISA series VPN gateways. Co-exists with Ivanti Neurons for Zero Trust Access deployments.
MSP Portal Support	Provides MSP Portal functionality for Managed Service Providers to monitor, manage and operate multiple customer tenants.