| Solution | Q: What will be the last software release for PSA appliances?
A: 9.1 R18 SW release that will be released in January 2023 will be last SW release with new features. 9.1 R18 release will have extended support period till December 2025. During this time, Ivanti will provide fixes for critical PRs and security vulnerabilities as defined in the policy: ivi-2589-pulse-secure-eol.pdf (ivanti.com).
Q: Will Ivanti provide updates and patches for the PSAs?
A: Yes, updates and patches will be provided for PSAs as defined in this policy. ivi-2589-pulse-secure-eol.pdf (ivanti.com)
Q: Can I purchase additional capacity (CONSEC licenses) on existing PSA appliances beyond End of Sale date?
A: Yes, customers can purchase additional capacity (CONSEC licenses) on existing PSAs after End of Sale date of Jan 15th, 2023 on a case by case basis with an exception process. However, please note that End of Support date will not be extended beyond December 2025 for any of the licenses – means new capacity purchases on PSA will have a short lifespan.
Additionally, we urge customers to upgrade to ISA appliances and 22.x software release for all future needs to get benefit of more modern, more secure and more performant products.
Tech Refresh
Q: What are suggested replacement products for each type of PSA appliance?
A:
| Old Product | Replacement Product | Status | | PSA 300c Appliance | ISA 6000 Appliance | Shipping since April 2022 | | PSA 3000 Appliance | ISA 6000 Appliance | Shipping since April 2022 | | PSA 5000 Appliance | ISA 6000 Appliance | Shipping since April 2022 | | PSA 7000c Appliance | ISA 8000c Appliance | Shipping since June 2022 | | PSA 7000f Appliance | ISA 8000f Appliance | Shipping since June 2022 | | PSA 3000-V Virtual Appliance | ISA 4000-V Virtual Appliance | Shipping since October 2021 | | PSA 5000-V Virtual Appliance | ISA 6000-V Virtual Appliance | Shipping since October 2021 | | PSA 7000-V Virtual Appliance | ISA 8000-V Virtual Appliance | Shipping since October 2021 | | Ivanti Connect Secure 9.1 Rx SW Release (Legacy stack) | Ivanti Connect Secure 22.x SW Release (Modern stack) | Shipping since October 2021 | | Ivanti Policy Secure 9.1 Rx SW Release (Legacy stack) | Ivanti Policy Secure 22.x SW Release (Modern stack) | Shipping since April 2022 |
Q: Does the ISA appliance provide the same functionality as the PSA appliance?
A: Yes, ISA platform provides exact same functionality as PSA appliance. At the same time, we have made several fundamental improvements at the kernel and OS layer due to which the security profile as well as performance of the ISA systems are significantly better than PSA systems.
Similar, to PSA appliances, ISA appliances can be used to host Ivanti Connect Secure (VPN) as well as Ivanti Policy Secure (NAC & profiler) software.
Q: Can I export configuration from my deployed PSA systems and import it into new ISA systems?
A: Yes.
Q: Can PSAs and ISA systems be deployed together in a mixed network?
A: Yes
Q: What virtual environments are supported with ISA-Vs?
A: VMware, AWS, Azure, GCP, Hyper-V, KVM, Nutanix (roadmap)
Q: What are the steps to migrate 9.1Rx configuration to a 22.x?
A: Migrating from PSA to ISA is very easy since ISA supports exact same VPN functionality as PSAs. Step by step migration procedure can be found here:
Migration from PSA to ISA (ivanti.com)
Licensing
Q: Can I migrate my existing subscription CONSEC licenses from PSA to ISA?
A: No. ISA appliances need new licenses. However, if you are migrating from a CONCEC subscription license to an ICS subscription license in the middle of the term, residual value to CONSEC licenses can be applied towards purchase of a new subscription as a one-time credit.
Q: Can I migrate my existing perpetual licenses from PSA to ISA?
A: No. Existing perpetual licenses cannot be migrated into a new ISA system. Perpetual licenses are tied to a particular HW system and cannot be migrated to a new HW device. ISA-V support only subscription SKUs.
Q: Will Ivanti offer customer service credits if a customer upgrades to ISA subscription from PSA subscription when current subscription still has some term left? How are the credits calculated?
A: Yes. Ivanti will offer service credits equal to residual value of subscription for mid cycle upgrade. Residual value calculations are applicable ONLY for subscription licenses. Residual value calculations will be using simple straight line depreciation formula. For example, if a customer has 1 year subscription for $100 on PSA and after 6 months the customer wants to adopt ISA. In that scenario the customer will get $50 as one-time credit towards purchase of new ISA subscription, or we can provide extended time to account for the value of residual value for new subscription license.
Q: Will Ivanti offer customer service credits if a customer upgrades to ISA perpetual SKU from PSA perpetual SKU?
A: No. There is no concept of any credits for perpetual licenses. All perpetual licenses expire when HW goes out of service. There are no exceptions for this rule.
Federal Certifications
Q: Does ISA use FIPS 140-2 certified crypto module?
A: Yes. Both ICS & IPS products with release 22.2 and higher use a FIPS crypto module that has NIST FIPS 140-2 #3335 certificate.
Q: Is ISA Common Criteria certified?
A: Ivanti is in process of certifying ICS and IPS 22.2 release for Common Criteria. We expect to receive final certification by Mar 2023. We can provide a letter from the NIAP contract lab on request attesting our ongoing certification.
Q: Is ISA on Dept of Defense Information Network Approved Product List (DoDIN APL)?
A: Ivanti is in process of certifying ICS and IPS for JITC DoDIN APL with v22.2. We expect to receive official APL memorandums by December 2022.
Neurons for Secure Access Adoption
Q. What is Neurons for Secure Access? Where can I find more information to learn about Neurons for Secure Access?
A. Secure Access Management Software | Ivanti
Q: Can I use Neurons for Secure Access Controller with PSA appliances with ICS 9.1 release?
A: Yes. You can use your existing PSA GWs running ICS 9.1 SW release with Neurons for Secure Access. Please be mindful that you will need to use a 9.1 R14 or higher software release version in order to do so.
Q: Can I use Neurons for Secure Access to manage both PSA and ISA appliances in a single network?
A: Yes. You can run a mixed network where both PSA and ISA are managed by Neuron for Secure Access controller. Please remember that you will need to use a 9.1 R14 or higher software release version to do so.
Q: Will L3 VPN Visibility come to PCS or only ICS?
A: L3 VPN visibility will be implemented only on Neurons for Secure Access (nSA). It will not be available on PSA or ISA without nSA.
Neurons for Zero Trust Access Adoption
Q. What is Neurons for Zero Trust Access? Where can I understand more information about Neurons for Zero-Trust Network Access Solution?
A. Zero-Trust Network Access (ZTNA) Solution | Ivanti
Q: Can I use Unified Access License (UAL: VPN + ZTA combined license) with PSA appliances with ICS 9.1 release?
A: Yes. You can use your existing PSA GWs running ICS 9.1 SW release with Neurons for Secure Access UAL license. Please remember that you will need to use a 9.1 R14 or higher software release version to do so. Furthermore, please remember that PSA GWs can only be used as VPN GWs.
Q: What are my next steps? Who should I contact?
A: For additional clarification and information, please contact your local Pulse Secure Security Specialist. If you don’t have that information available, please email Contact the Ivanti Sales Team | Ivanti, |
|
|---|
