Who Is Ivanti?<\/h2>\n
The Ivanti corporation formed through a series of mergers and acquisitions of component companies such as: AppSense, Cherwell, MobileIron, Pulse Secure, RiskSense, and Wavelink. Unified under the Ivanti brand, the component technologies provide solutions for unified endpoint management, service management, asset management, supply chain operations, patching solutions, and zero trust solutions. Ivanti maintains 36 offices in 23 nations globally and has 3,100 employees servicing more than 38,000 customers with the help of over 4,000 partners.<\/p>\n
Policy Secure<\/h2>\n
Ivanti acquired Pulse Secure<\/a> on December 1, 2020, from Siris Capital. Previously, Siris Capital had spun off Pulse Secure<\/a> as a standalone entity after acquiring the company from the enterprise networking leader, Juniper Networks.<\/p>\n Ivanti NAC solution consists of four main components:<\/p>\n Additionally, Policy Secure integrates with other Ivanti tools to offer additional features related to network security such as:<\/p>\n Agent and agentless options<\/a> are available with Ivanti. Agentless connections require using web browsers to make secure network<\/a> connections using layer 3 controls.<\/p>\n Agents can be figured to download automatically to devices using Microsoft Windows. Host assessments by Policy Secure are performed through the endpoint security assessment plug-in (ESAP) agent installed on endpoints.<\/p>\n Maximum concurrent users varies depending upon the appliance capabilities<\/a>. Low-end physical and virtual appliances support up to 200 concurrent users and high-end appliances support up to 50,000 concurrent users.<\/p>\n Similarly, appliance size determines the expected login rate and max tunnel throughput. Users can perform between 20 and 122 logins per second. Max tunnel throughput will depend upon the mode \u2014 for encapsulating security payload (ESP) tunnel mode the tunnel throughput maximum will vary between 200 Mbps and 4.2 Gbps, and for secure socket layer (SSL) mode the tunnel throughput maximum will vary between 100 Mbps and 2.8 Gbps.<\/p>\n Appliances may be clustered for high availability (synchronized active and passive devices) or load balancing (all devices active). Using a license manager, clustering, and multiple devices can create a large, high volume instance. Ivanti does not disclose the maximum number of endpoints such an infrastructure can support.<\/p>\n Ivanti Policy Secure provides FIPS level 1<\/a> (FIPS 140-1 and 140-2) support and security certifications that support compliance with HIPAA, PCI DSS, ISO 27001, and other security standards.<\/p>\n Ivanti Policy Secure, trained during a learning period, can perform basic behavior analytics. Secure also consumes threat intelligence information from third party sources such as firewalls and IDS systems or through additional Ivanti modules and products. Intelligence can be used to perform automated security responses.<\/p>\n Ivanti Policy Secure can be deployed as physical appliances or installed as a virtual machine in local data centers or in the cloud. Devices can be clustered in two or more units to provide load balancing (all active) or high availability (some passive) benefits.<\/p>\n Wide area network (WAN) clusters are possible, but only on specific appliances.Devices can be deployed with attached licenses, or a server may be created to perform license management across multiple appliances.<\/p>\n Organizations need to obtain appliances (virtual or physical), licenses for the servers based upon the number of expected users, and additional licenses for optional modules. Bundled pricing, volume discounts, and pricing discounts are likely, but no pricing is officially published by Ivanti, so organizations should contact Ivanti<\/a> for quotes.<\/p>\n Some example partner pricing is listed, but organizations need to be sure of the currency (e.g., US dollars vs. Canadian dollars) and that the configurations are the same since some resellers quote appliances bundled with services while others sell the products separately.<\/p>\n Ivanti currently sells five different hardware models and three virtual appliance<\/a> configurations.<\/p>\n Users can download licenses from the Software Download Center<\/a> using the same credentials as the Ivanti Community site<\/a>. Licenses can be downloaded and managed by specific appliances or managed by a licensing server.<\/p>\n The appliances support four different types of licenses:<\/p>\n Perpetual licenses<\/a> include 12 months of maintenance and support. Further maintenance contracts must be purchased to obtain future updates and support, including patches, updates, upgrades, and content feeds such as IoT profiles. Upon the expiration of maintenance, the appliance may be used as-is without upgrades.<\/p>\n Subscription or term licenses may be purchased for one, two, and three years and include software, updates, and support. At the expiration of a subscription, the appliance may no longer be used.<\/p>\n Lapsed licenses require a reinstatement fee based upon the annual fee. Renewal fees typically increase by 5% per year.<\/p>\n Ivanti offers four levels of support: Standard, Premium, Enterprise and Success Squad. All customers are automatically enrolled in standard support, which includes the customer community, a knowledge base, and a support response time of 2 hours (24×7) via the online portal or phone. Premium includes self-guided resources, one Advantage Learning License, a named support manager, and a support response time of one hour.<\/p>\n Enterprise support adds a designated customer service manager, success plan, expert coaching programs, quarterly business reviews, one virtual instructor-led class, and a designated enterprise support engineer. Success Squad adds personalized success plans, technical guidance and validation on upgrades, additional learning licenses and virtual instructor-led classes, go-live support, and health checks.<\/p>\n Ivanti Policy Secure does not contain as robust an IoT database or lengthy integration list compared with more prominent competitors in the NAC solution market. However, Policy Secure can deliver automated guest onboarding with the basic license when many larger, more expensive competitors require add-on modules to deliver the same capabilities.<\/p>\n Although Ivanti\u2019s licensing model can be confusing, Policy Secure has the potential to deliver robust, fundamental network access control with a lower total cost of ownership. Enterprises with less complex needs and networks should include Ivanti Policy Secure on their evaluation list to ensure a low-cost comparison against other brands.<\/p>\n This article was originally written by Drew Robb<\/a> on July 7, 2017, and was updated by Chad Kime<\/a> on April 14, 2023.<\/em><\/p>\n\n\n\n
\n
![\"Ivanti](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/04\/ivanti-rules_node-1024x576.png\")
Agents<\/h2>\n
Applicable Metrics<\/h2>\n
Security Qualifications<\/h2>\n
Features<\/h2>\n
\n
\n
Pros<\/h2>\n
\n
Cons<\/h2>\n
\n
Intelligence<\/h2>\n
Delivery<\/h2>\n
Pricing<\/h2>\n
\n
\n
Bottom Line: Top Alternative to Higher-Priced Solutions<\/h2>\n