FEATURE BULLETIN
Data Protection with Always-on
VPN & Lockdown Mode
Enhanced security and compliance for
organizations and end-users
Highlights Overview
• Keep corporate data safe & Industries such as financial services, health care, and pharmaceuticals
secure with simplified end- require strict security controls to prevent data theft and maintain
user experience compliance. Ensuring the safety of corporate data on laptops is critical
given that workforces are becoming increasingly mobile. Violation of
• Prevent end users from regulations, like PCI-DSS and HIPAA, can result in fines, lengthened product
circumventing secure and service timelines, or legal liability.
connections
Pulse Secure offers Always-on VPN and Lockdown Mode for
• Traverse captive portals while compliance-heavy businesses. These features mandate that all network
ensuring data protection traffic from remote end-user laptops flow through the corporate network,
• Maintain data visibility reducing the possibility of data loss or leakage.
to adhere to compliance
Always-on VPN
standards
With Always-on VPN, when an end-user logs into their laptop, the Pulse
• Supported on Windows, and Desktop Client automatically makes a secure connection to the Pulse
macOS Connect Secure gateway. Once connected, all traffic from the laptop is
sent via a protected tunnel. Furthermore, the end-user will be unable to
disconnect from the tunnel, ensuring that data-in-motion remains secure.
Compliance & Industry
Healthcare -- HIPAA, HITECH
Financial -- GLBA, FFIEC, PCI-DSS
Federal -- FIPS, DoDIN APL, NDcPP
General -- OSHA, SOX, GDPR
Lockdown Mode
Network administrators can configure Pulse Secure’s Desktop Client to
prohibit end-user from making any changes to the Pulse Connection
profiles or disconnecting from Gateway or modifying any settings
Lockdown Mode ensures that data does not leave an end-user’s laptop
unprotected. This is especially important for increasingly mobile
workforces.
With Lockdown Mode, data can only be sent or received when the device
is connected to the Pulse Connect Secure gateway. (If, for some reason,
a connection to Pulse Connect Secure is unavailable, data cannot be sent
from the device.) When Always-on is enabled, end users are unable to
disconnect from the VPN tunnel, keeping sensitive data-in-motion secure.
Coupled with location awareness rules that enable a device to connect conditionally, Lockdown Mode can effectively
protect data for numerous industries. An insurance adjuster, for example, can investigate a claim at a remote site and
safely transfer data. Upon returning to a local or branch office, however, Lockdown Mode will automatically detect their
location and be lifted.
User Experience
When Lockdown Mode is enabled, users are unable to access the Internet without first having a VPN connection. Pulse
Secure’s Desktop Client has the intelligence to recognize a captive portal and enables the user to enter the necessary
information so that an Internet connection can be established.
Moreover, user credentials can be saved, or certificate-authentication can be used to expedite connectivity. Multi-factor
authentication (MFA) is also supported (as is machined-based authentication) for when devices need to connect for
system updates prior to users logging in.
ABOUT PULSE SECURE
Pulse Secure provides easy, comprehensive software-driven Secure Access solutions for
people, devices, things and services that improve visibility, protection and productivity for
Corporate and Sales Headquarters our customers. Our suites uniquely integrate cloud, mobile, application and network access
Pulse Secure LLC to enable hybrid IT in a Zero Trust world. Over 23,000 enterprises and service providers
2700 Zanker Rd. Suite 200 across every vertical entrust Pulse Secure to empower their mobile workforce to securely
San Jose, CA 95134
(408) 372-9600
access applications and information in the data center and cloud while ensuring business
[email protected] compliance. Learn more at www.pulsesecure.net.
www.pulsesecure.net
Copyright 2019 Pulse Secure, LLC. All rights reserved. Pulse Secure, Pulse Secure logo is a registered trademark
and Pulse SDP is a trademarks of Pulse Secure, LLC. All trademarks, service marks, registered marks, or
linkedin.com/company/pulse-secure www.facebook.com/pulsesecure1
registered service marks are the property of their respective owners. Pulse Secure assumes no responsibility for
any inaccuracies in this document. Pulse Secure reserves the right to change, modify, transfer, or otherwise revise
this publication without notice. twitter.com/PulseSecure [email protected]
www.pulsesecure.net
VERSION: 10/01/2019
