Step 1: Adding a Quick Connect IPSec Gateway in Jamf Security Cloud

Jamf Connect Documentation

Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. Sign in to Jamf Security Cloud, and navigate to Integrations > Access gateways.
  2. On the Dedicated gateways tab, in the Dedicated IPsec gateways section, click Create gateway.
  3. Under Quick Connect IPSec, click Create gateway.
  4. On the Create Quick Connect IPSec page, complete the fields as follows:
    • Gateway nameProvide a name that will appear for this connection in your access policies.
    • Contact nameProvide the name of the individual deploying the quick connect VM.
    • Contact emailProvide the email address of the individual deploying the quick connect VM.
    • IPSec Network VendorSelect the networking equipment that will be used to connect to Jamf Security Cloud.
    • Egress regionIndicate the region from which Jamf Security Cloud should initiate the IPSec tunnel. Typically this should be as close to the geographical location of your IPSec interconnect equipment as possible.
    • Jamf Security Cloud IPSec Source IP AddressesChoose from the following based upon your network equipment's ability to support dynamic addressing:
      Dynamic addressing
      Connections will originate from any one of the IP addresses that belong to the particular Availability Zone; for example 54.220.161.57 (Zone A) or 18.202.42.169 (Zone B).
      Single IP address
      Define the single IP address from the drop-down list that all IPSec traffic from Jamf Security Cloud will originate from for this interconnect. This option provides potentially lower availability, but may be required depending on your network equipment's capabilities.
    • Your IPSec gateway IP address The IP address that will be listening for inbound IPSec connections from Jamf Security Cloud.
  5. Click Generate to generate your authentication secret password, the Pre-Shared Key (PSK) to be used for this IPSec security association.
  6. Click Copy and then paste the authentication secret password in a secure location, such as a password manager application.
  7. Click Save and create.
The new gateway appears in the Dedicated IPSec gateways list.