Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Ivanti identifies CVE-2025-22457 as affecting several gateway product families. The fixed release it names for Ivanti Connect Secure is 22.7R2.6, released February 11, 2025. Ivanti’s April 3, 2025 update also reported a limited number of exploited Connect Secure and legacy Pulse Connect Secure appliances, while giving different risk caveats for Policy Secure and Neurons for ZTA.
Which Ivanti gateway products and versions are affected?
In its April 3, 2025 security update, Ivanti listed these product families and versions for CVE-2025-22457:
- Pulse Connect Secure: 9.1x.
- Ivanti Connect Secure: versions up to and including 22.7R2.5.
- Policy Secure.
- Neurons for ZTA gateways.
The advisory names these products as affected but does not provide a numeric count of affected appliances or a CVSS score. Ivanti’s wording about exploitation is qualitative, not a count.
What is the fixed Ivanti Connect Secure version?
Ivanti says CVE-2025-22457 was fully patched in Ivanti Connect Secure 22.7R2.6, released February 11, 2025. Its April 3 update states: “This vulnerability was fully patched in Ivanti Connect Secure 22.7R2.6 (released February 11, 2025).” This identifies the fixed release for Connect Secure; administrators should check Ivanti’s current advisory and product guidance for any later updates or present-day deployment instructions before making changes.
#1 Best Overall
- Intel Processor N150: Intel Twin Lake N150 Processor quad core 4 threads, 6M Cache, up to 3.60 GHz, supports Inter AES-NI
- Ports: 6* 2.5Gbe RJ45 LAN, 4*USB2.0, 1*USB3.0, 1*DC IN, 1*TF solt, 1*Type-C, 2*HDMI 2.1 support dual-screen 4K display
- Storage & Memory: The firewall mini pc comes with 1*SO-DIMM DDR5 RAM slot, supports up to 32GB; 2*M.2 NVMe x1 solt and 1* SATA3.0
- 6 Intel I226-V 2.5G NIC Ports: The fanless firewall mini PC is powered by Intel i226-V NIC chips, which supports 6 2.5 Gigabit Ethernet and is more stable, faster and consumes less power than i225 NIC. It has good compatibility with soft routes, firewalls and other network applications
- Compatibility: No pre-installed operating system. All hardware has been tested with OPNsense, untangle, Windows, Proxmox and other popular open source software solutions
How the advisory differs by product
Ivanti Connect Secure
Ivanti reported that a limited number of customers had exploited appliances running Connect Secure 22.7R2.5 or earlier. The statement does not give an exact number. Administrators should compare their installed release with 22.7R2.6 and consult current Ivanti guidance for the appropriate update path.
Pulse Connect Secure
Ivanti also reported a limited number of exploited Pulse Connect Secure 9.1x appliances. That product line reached end of support on December 31, 2024, according to Ivanti. The vendor advises customers still using it to contact Ivanti for a migration path to Connect Secure or move to another secure solution; the advisory does not describe a supported Pulse 9.1x code update.
Rank #2
- Available with the Cloud Labs which provide a hands-on, immersive mock IT infrastructure enabling students to test their skills with realistic security scenarios
- New Chapter on detailing network topologies
- The Table of Contents has been fully restructured to offer a more logical sequencing of subject matter
- Introduces the basics of network security—exploring the details of firewall security and how VPNs operate
- Increased coverage on device implantation and configuration
Policy Secure
Ivanti said it was not aware of exploitation in Policy Secure at the time of disclosure and described Policy Secure as intended for internal use. Treat those statements as vendor-specific context, not as a claim that every deployment configuration is risk-free. Check whether your deployment follows Ivanti’s intended use and review the current vendor advisory.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallNeurons for ZTA gateways
Ivanti said it was not aware of exploitation in Neurons for ZTA at disclosure and stated that production Neurons for ZTA gateways cannot be exploited. The statement distinguishes production gateways; confirm your deployment’s status and follow current Ivanti instructions rather than extending that assurance to other configurations.
Quick Recap
Rank #3
- Compact and Efficient Design: The FortiGate 40F is designed for small to mid-sized businesses and enterprise branch offices, featuring a compact, fanless desktop form factor that ensures quiet operation and minimizes space usage.
- Robust Connectivity Options: Equipped with 5 GE RJ45 ports, including 1 WAN port and 4 internal ports, this model provides essential connectivity and flexibility for various network configurations in a small-scale environment.
- High-Performance Security: Offers up to 1 Gbps IPS throughput and 600 Mbps threat protection throughput, using Fortinet’s purpose-built security processor technology to deliver industry-leading performance and protection for SSL encrypted traffic.
- Advanced Threat Protection: Integrated with Fortinet’s AI-powered FortiGuard Labs, the FortiGate 40F offers comprehensive cybersecurity, identifying and mitigating both known and unknown threats to maintain robust security across your network.
- Simplified Management and Deployment: Features a user-friendly management console that provides comprehensive network automation and visibility, coupled with Zero Touch Integration with Fortinet’s Security Fabric for easy deployment.
How administrators can assess their deployment
- Identify the product family and exact installed version. Check the appliance inventory or management interface, then compare it with Ivanti’s affected-product list above.
- For Connect Secure, verify whether the installed release is 22.7R2.6 or later. Ivanti identified 22.7R2.6 as the fully patched release in its April 3, 2025 update. Confirm the current supported release and update procedure in Ivanti’s latest guidance.
- For Pulse Connect Secure 9.1x, plan migration. Because Ivanti states the product reached end of support on December 31, 2024, contact the vendor for migration guidance or move to another secure solution.
- For Policy Secure and Neurons for ZTA, assess the relevant deployment caveat. Verify whether Policy Secure is being used internally and whether a Neurons for ZTA gateway is a production gateway; do not substitute those caveats for current vendor direction.
- Check the current Ivanti security advisory and support portal before acting. The statements and release references here reflect the April 3, 2025 update and may not capture later advisories, support changes, or recommended procedures.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
