Ivanti licensing is the set of terms under which Ivanti sells its IT management and security software: endpoint management, patch and vulnerability management, service and asset management, and secure access products such as Connect Secure. One master contract, the Ivanti End User License and Services Agreement (EULSA), covers on-premise Software, SaaS Offerings, Support and Maintenance Services and Professional Services. It is supplemented by documents incorporated by reference.[1] The Agreement does not apply where the customer has a Separate Agreement with one of the Ivanti entities it lists. It replaces a separate agreement made with any entity not listed.[1] The contracting entity depends on region. Ivanti, Inc. contracts in the Americas (except Brazil) and in China, with separate entities for Brazil and Japan. Ivanti International Limited contracts for Wavelink and Naurtech branded products in EMEA and Asia Pacific, and Ivanti UK Limited everywhere else.[1]
Every grant is made “in accordance with” the License Type, License Model, Version and quantities purchased, and the Invoice records which License Type and License Model apply.[1] The practical consequence for a software asset manager is that the metric of an Ivanti product is a property of the order, not of the product name. The same agreement defines fifteen License Models, and the Invoice picks one for each line. For the general families see named user licensing and concurrent and device licensing.
Editions
Ivanti does not publish a public price list or a product-to-metric table. Its product documentation does show how the main product lines are counted in practice:
| Product line | How the vendor documents counting | Deeper article |
|---|---|---|
| Ivanti Connect Secure, Policy Secure | Concurrent user licences (CONSEC, POLSEC) in Gateway Licensing Mode, or named users under the Unified Access License[6] | Ivanti Connect Secure licensing |
| Ivanti Endpoint Manager | Nodes reported by each core server; client and server licences[7] | Ivanti endpoint and patch management licensing |
| Ivanti Security Controls | Licence seats consumed per deployment target or agent machine[8] | same |
| Ivanti Neurons for Patch Management | Platform fee plus device-based licences[10] | same |
| Ivanti Neurons for MDM (Secure UEM packages) | User licences, each allowing up to five devices[11] | same |
| Ivanti Neurons for ITSM | Named and concurrent licences, grouped in license bundles assigned to roles[9] | Ivanti Neurons for ITSM licensing |
| Ivanti Neurons for HR, Neurons for Facilities | Named End User for self-service users[1] | same |
The Connect Secure licence part numbers named in the documentation are recorded as catalog SKUs, for example CONSEC-XU-ZYR concurrent user subscription and PSA-LICENSE-MBR license member licence. None has a public price.
Metrics
The EULSA §2(c) lists fifteen License Models. Each is a catalog metric row that quotes the vendor definition.[1]
| Ivanti License Model | Catalog row | Unit counted |
|---|---|---|
| User-Based | User-Based | Each User, on any number of that User’s Devices |
| Named User | Named User | Each authorized User, used or not |
| Named End User | Named End User | Self-service users of Neurons for HR and Facilities |
| Concurrent User | Concurrent User | Peak simultaneous Users in the previous 30 days |
| Named Analyst | Named Analyst | Each Analyst with a dedicated licence |
| Concurrent Analyst | Concurrent Analyst | Peak simultaneous Analysts in the previous 30 days |
| Device-Based | Device-Based | Each Registered Device or Device with the Software deployed |
| Device-Limited | Device-Limited | Each Device; transfer only after accidental destruction |
| Server-Based | Server-Based | Each Server tracked, supported, managed or running the Software |
| Ivanti Neurons Device | Ivanti Neurons Device | Each Registered Device and each tracked, supported or managed Device |
| Asset-Based | Asset-Based | Each Asset tracked by or input into the Software |
| Concurrent Connection | Concurrent Connection | Peak simultaneous Connections in the previous 30 days |
| Throughput | Throughput | Data passed through or processed |
| Management | Management | Each Device or Ivanti Platform managed |
| Per Instance | Per Instance | Each Instance of the Software |
Product documentation adds product-specific units that sit on top of these models: Connect Secure concurrent user, Unified Access License, Endpoint Manager node, Security Controls license seat, Patch for Configuration Manager seat and Neurons for MDM user license.
Counting / floors
Definitions drive the count (EULSA Version 03.26). A User is an individual employed by, or providing services to, the customer who is supported with or uses the Software. An Analyst is such an individual with login access to manage and use the Software.[1] A Device includes physical devices, virtual machines and electronic or virtual mailboxes.[1] A Registered Device counts from Enrolling until it is explicitly marked “removed”, “retired”, “wiped” or “deleted”.[1] Catalog proof: Device includes virtual machines and mailboxes; Registered Devices count until marked removed.
Reassignment. Under the User-Based, Named User, Named End User and Named Analyst models a licence may move to another person no more than once every thirty days. The Device-Based, Server-Based, Ivanti Neurons Device, Asset-Based and Management models apply the same thirty-day limit to devices, servers and assets.[1] Device-Limited licences may move only to a Device of the same make and model after accidental destruction.[1] Catalog proof: Named licences may be reassigned at most once every 30 days; Device-Limited licences transfer only after accidental destruction.
Concurrency is a 30-day peak. Concurrent User, Concurrent Analyst and Concurrent Connection licences are required for the maximum number of simultaneous users, analysts or connections “at any given moment during the previous thirty (30) days”.[1] A single peak therefore sets the requirement for the following month. Catalog proof: Concurrent licences are counted at the 30-day peak.
Tracked, not only installed. The Server-Based, Ivanti Neurons Device and Asset-Based models count what the Software tracks, supports or manages, not only where it is installed. The Asset definition extends, for risk management Software, to every physical and virtual object registered, managed and discovered.[1] Catalog proof: Ivanti Neurons Device counts every tracked or managed device; Asset-Based counts every tracked or discovered asset.
Floors. None of the retrieved documents publishes a minimum purchase quantity. Quantities are set in the Invoice.[1] Several products do not block use beyond the licensed quantity. Endpoint Manager does not limit a core server to the nodes purchased,[7] and Neurons for ITSM logs, rather than refuses, logins above the licensed count.[9] Deployment beyond entitlement is therefore possible and is reported to Ivanti by the software’s own data.
Virtualization & partitioning
Ivanti counts virtual machines as Devices. The Device definition names “a virtual machine, such as an operating environment that may be running concurrently with another operating environment on a single physical device”.[1] The Device-Based, Server-Based, Ivanti Neurons Device and Asset-Based models each say “whether physical or virtual”.[1] The EULSA publishes no host-based, processor or core alternative, and no hard or soft partitioning policy of the kind described in virtualization and partitioning. A Server excludes devices running hardened operating systems that do not allow software installation, such as network switches, firewalls and load balancers.[1] Security Controls documents that a virtual machine counts once even when scanned both online and offline.[8] Catalog proof: Server excludes hardened appliances; A virtual machine scanned online and offline counts once.
Cloud / BYOL
Ivanti’s own cloud products are SaaS Offerings: the Software provided under a Subscription License as a hosted service.[1] They are governed by the SaaS Supplemental Terms, which set a 99.9% monthly availability commitment and charge a fee of at least 25% of the SaaS Offering to move an instance to another hosting location.[3] A customer that switches part of a SaaS Offering to an on-premise Perpetual License at the end of a term may be charged a one-time reinstatement fee of 10% of the SaaS cost.[1] The retrieved documents contain no bring-your-own-license rule for running on-premise Ivanti software on public clouds. Connect Secure’s Gateway Licensing Mode is stated to run in both on-premises and cloud deployments.[6] Catalog proof: Moving from SaaS to perpetual can cost a 10% reinstatement fee; Moving a SaaS hosting location costs at least 25%.
Programs
- License types. A Perpetual License is not time-limited. A Subscription License expires at the end of its period and may contain disabling code.[1] Subscriptions are typically bought for one, two or three years.[5] The SaaS Offering is a hosted subscription.
- Support and Maintenance Services. Support is included with Subscription Licenses and SaaS Offerings and bought separately for Perpetual Licenses. When bought, it must cover all licences.[1] The tiers run from Standard and Premium to Enterprise, Value Acceleration Bundle and Success Squad.[4]
- Renewal programs. These are Multi-year renewal, Co-termination, Like-for-like migration and, by exception, the Reduction of License Use Exception Policy.[5] See Ivanti support, renewals and audit.
- Evaluations. Trial Software is limited to non-production use for the period on the licence key, or 45 days.[1] A signed Software Evaluation License Agreement covers larger evaluations.[2]
- Affiliate participation agreement. Affiliates may buy under the customer’s EULSA after signing a participation agreement and passing a credit check.[1]
Contract terms
Restrictions. The Software may not be used as a service provider or application service provider for third parties, and the licence key may not be disclosed. Benchmarks intended for publication need Ivanti’s prior written consent.[1] Catalog proof: No use as a service provider for third parties; Licence keys may not be disclosed; Benchmarks for publication need consent.
Term and payment. The Agreement and all Invoices renew automatically for one-year terms. Either party may terminate at the end of a term on ninety days’ notice. Early termination leaves the fees for the rest of the term payable.[1] Payments are non-refundable and cannot be credited toward other Software.[1] Catalog proof: Agreements auto-renew yearly unless 90 days’ notice is given; Payments are non-refundable and not creditable.
Transfer. Assignment needs written consent, except on a transfer of all or substantially all of a party’s business and assets.[1] Software on an Ivanti Platform (appliance) may be used only on that appliance. Its licence ends if the appliance is sold, even for Perpetual Licenses.[1] Software associated with second-hand hardware must be re-purchased and registered.[12] Catalog proof: Assignment needs consent except on a business transfer; Appliance software licence ends when the appliance is sold; Software does not transfer with second-hand hardware.
Audits and compliance
EULSA §14 gives Ivanti two audit mechanisms.[1]
- On-premise. Customers keep Records of use for the term and two years after. Within thirty days of a request they supply the Records or allow a remote audit, at most once per calendar year unless misconduct is suspected. Underpayment is charged at then-current list price, with up to three years of back subscription or support. If the shortfall exceeds 5% of the amounts paid for the audited period, the customer also pays the audit costs. The Software may also send telemetry to Ivanti.
- SaaS. Ivanti may continuously monitor SaaS access and usage and start a remote audit when it detects non-compliance.
Customers may not delete distributed licences, or take licence transfers from a managed service provider, to appear compliant in anticipation of or during an audit.[1] Catalog proof: On-premise audit: once a year, 30 days, back fees up to three years; SaaS usage is monitored continuously; No deleting licences or taking MSP transfers before an audit. The procedure and its effect on renewals are covered in Ivanti support, renewals and audit. For the general discipline see software license audit.
Out of scope
- Signed Separate Agreements, enterprise licence agreements and public-sector contract vehicles, which were not retrievable.
- Prices. Ivanti publishes no price list; the Neurons for Patch Management page, for example, directs buyers to sales for an estimate.[10]
- Hardware appliances (ISA, PSA) as hardware, other than the software-transfer rules above.
- Professional Services, Ivanti Advantage Learning training terms and the Supplemental Terms for AI Tools, beyond the training licence SKUs recorded in the catalog.
- Products acquired with their own licence terms that the retrieved documents do not name.