InstaSafe Secure Access (ISA) Gateway Agent is a software that acts as the entry and exit point for user access.  Gateways are deployed at the edge of a private network, and are used to connect remote clients or networks to the private network. It is responsible for encrypting and decrypting data sent over the secure connection, as well as routing the data between the client and the private network. Gateways use DTLS protocol to establish and secure the connection. It can also be used to connect two separate private networks together, such as in a site-to-site configuration. 

The ISA Gateway must be provisioned on a physical or virtual server at each of the data centres where applications and other services are hosted that are remotely accessed by users. To ensure redundancy, it is recommended to provision a backup Gateway as well. This ensures that unforeseen issues like hardware failure or OS corruption do not lead to network downtime.

Both the primary and back-up Gateways must be configured with static IP addresses. The IP addresses must be given to the InstaSafe administrator for the purpose of opening the required ports in the controller to accept the connection from the Gateway Agents. 

1. Log into the ISA web portal using admin credentials. 
2. On the left-side menu, navigate to the CONTROLLERS & GATEWAYS > Gateways page.  
3. Listed here are two Gateways. This KB article will describe the process of installing the Gateway Agent for Mumbai-Data-Centre. 
4. Next, on the left-side menu, under Downloads, click on Gateway Agents.
5. Listed here are the Gateway Agents and their respective back-up Gateway Agents. Click on the Microsoft icon to download the Agent software for Mumbai-Data-Centre to the local disk.
6. The Agent software will be downloaded to the local disk.

1. On the Windows Server, make sure the Routing and Remote Access Service role is enabled.
2. Locate the downloaded file and double-click on the file.
3. If User Access Control is enabled on the server, click Yes on the prompt window. 
4. On the License Agreement screen, click I Agree. 
5. Once the installation is completed, click Close. 
6. On the InstaSafe Gateway Details prompt, enter the following information. All fields are case sensitive.
   
1. Gateway Name: Enter the name of the Gateway.
2. Admin Login ID: Enter the administrator username.
3. Password: Enter the password of the administrator.
7. Click Submit to submit the information for verification.
   
8. If the Gateway details are verified as correct, a window with message, Completed InstaSafe Gateway installation on this computer, will be displayed. Click OK.            
   
9. Open File Explorer and navigate to C:\ and open the folder Program Files (x86).
10. Open the Log folder.
11. Open the log file isa-training.txt
12. Scroll down
13. Here you can see the IP address assigned to the Tap-Windows Adapter V9 virtual interface.
14. Open the command line window and enter ipconfig at the command prompt to see the IP address assigned to the Tap-Windows Adapter V9 virtual interface. 
15. On the ISA web console, you will be able to see the Gateway listed under the LOGS & REPORTS > Live Gateways page. 

The Gateway Agent will initiate an outbound connection to the ISA Controller and establish a secure connection. 

Adding Remote Access Service