# Ivanti Connect Secure (Pulse Secure VPN)

In this guide, you will configure syslog log forwarding for Ivanti Connect Secure (previously known as Pulse Secure VPN).

### Prerequisites

* [ ] Admin access to the Ivanti Connect Secure console

### Add the data connector in Radiant Security

1. Log in to [Radiant Security](https://app.radiantsecurity.ai/).
2. From the navigation menu, click **Settings** > **Data Connectors** and click **+ Add Connector**.
3. Search for and select the **Pulse Secure VPN** option and then click **Data Feeds**.
4. **Under Select your data feeds**, select the **Pulse Secure VPN Syslog** data feed and then click **Credentials**.
5. Under **Credential Name**, give the credential an identifiable name (e.g. `Pulse Secure VPN`). If you already have a credential in place, select it from the drop-down menu.
6. In the **Connector tag** field, enter a random value. This value will act as the salt to randomize the unique **Token** you’ll download in the next step.
7. Click **Add Connector**.
8. Copy and save the **Token** value by clicking the clipboard option or clicking **Download File**.
9. Click **Done** to save your changes.

### Install a syslog forwarder through the Radiant Security Agent 

To send logs from Connect Secure to Radiant Security, a syslog forwarder is required. If you haven’t already set one up, refer to the [Install the Radiant Security Agent](/radiant-connectors/data-connectors/install-the-radiant-security-agent.md) for guidance. When configuring the forwarder, use the **Token** value that you copied in the previous section, and be sure to save its IP address for use in the next step.

### Configure syslog forwarding on Ivanti Connect Secure

1. Select **System > Log/Monitoring.**
2. Select the **Events** tab and then click **Settings**.
3. On the **Select Events to log** Section, check the boxes for **Connections Requests, Profiler Events** and **Reverse Proxy.**
4. In the **Syslog servers** section, configure the following settings:
   1. In the **Server name/IP** field, enter the local IP address of your syslog forwarder
   2. In the **Facility** list, select **LOCAL0**
   3. In the **Type** list, select **TCP**
   4. In the **Filter** list, select **WELF:WELF**
   5. In the Source Interface list, select **Global**
5. Click **Add**.
6. Click **Save Changes**.
7. Repeat steps **5-7** for the **User Access** and **Admin Access** tabs.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.radiantsecurity.ai/radiant-connectors/data-connectors/ivanti-connect-secure-pulse-secure-vpn.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.