Ivanti Policy Secure

In today’s zero-trust security landscape, gaining visibility and control over every device on the network is crucial. Ivanti Policy Secure (IPS) provides a comprehensive Network Access Control (NAC) solution that ensures only authorized, compliant, and secured users and devices can access corporate resources. This course is designed to equip IT professionals with the expertise to deploy, configure, and manage IPS. By combining deep technical dives into protocols like 802.1X and TACACS+ with practical enforcement strategies for multi-vendor environments, participants will learn to build a robust defense against internal threats.

Course outline

Module 1: Solution Overview and Components

NAC fundamentals
IPS architecture
Enforcement modes
Licensing

Module 2: Initial Setup and System Maintenance

Initial setup wizard
Console operations
System maintenance
Configuration management

Module 3: Access Management Framework

User realms
User roles
Sign-in policies
Role mapping rules

Module 4: Profiler and Network Visibility

Endpoint identification
Profiler configuration
Profile groups
WMI / SSH profiling

Module 5: Layer 2 Enforcement (802.1X and MAC Authentication)

802.1X framework
MAC authentication
RADIUS return attributes
Change of Authorization (CoA)

Module 6: Network Device Administration (TACACS+)

Centralized management
Shell policies

Module 7: Endpoint Security – Host Checker

Compliance policies
ESAP management
Remediation

Module 8: Layer 3 Enforcement and NGFW Integration

Firewall enforcers
Authentication table provisioning

Module 9: Guest Access and BYOD

Guest management
Self-registration
Enterprise onboarding

Module 10: High Availability and Advanced Troubleshooting

Clustering
System status and dashboards
Advanced troubleshooting

Course objectives

After completing this course, you will be able to:
- Master NAC Fundamentals:
  Explain how IPS provides visibility and identity-enabled enforcement.
- Deploy IPS Appliances:
  Perform initial setup, install licenses, and manage system versions.
- Enable Full Visibility:
  Use the Profiler to identify all devices on the network, including IoT endpoints.
- Enforce Granular Access:
  Design user roles, realms, and policies to control Layer 2 and Layer 3 access.
- Secure Network Devices:
  Implement TACACS+ for centralized administration of network infrastructure.
- Ensure Compliance:
  Apply Host Checker policies to assess endpoint health before granting access.
- Troubleshoot Complex Issues:
  Use advanced logging and diagnostic tools to maintain system stability and uptime.

Who should attend?

This course is designed for network and security professionals responsible for deploying, managing, or supporting Network Access Control (NAC) solutions. It is ideal for engineers who want to build a strong foundation in Ivanti Policy Secure (IPS) or enhance their ability to deliver visibility and identity-enabled enforcement across multi-vendor network environments.

Prerequisites

Participants should have a basic understanding of:

General networking principles (TCP/IP)
Network security concepts
802.1X protocols

Familiarity with authentication and directory services such as Active Directory and LDAP is required to effectively understand role-mapping rules and access control policies within the IPS framework.

Join Now

ARE YOU READY?

If you need this course, you can fill out the form or contact us.