The best feature of Illumio is micro-segmentation. Within the same segment of a network or device, I can create micro-segmentation based on location, environment, and roles. I can customize what exactly each particular endpoint device is and accordingly write rules to manage communication through inbound and outbound rules, allowing or denying communication as required.

While working with micro-segmentation and setting rules based on roles or locations, managing and updating policies in Illumio does not take considerable time because I have intra-scope and extra-scope rules. If I make a rule and need to modify it, I simply adjust the scope accordingly. When a new workstation comes into the network, I only need to apply the labels to that workstation, and it merges into a policy automatically without needing to modify the policy unless absolutely necessary.

Deploying the VEN is straightforward, as I can deploy it on Windows, Linux, and macOS operating systems. In my organization, we have deployed it on approximately 300,000 devices, and it is easily manageable through Illumio. We have a cloud, SaaS-based environment of the PCE where I manage all those devices, making deployment very straightforward.

Illumio has positively impacted my organization by protecting devices not only from external threats but also from internal ones. If any single PC becomes compromised by an external or internal attack, I can isolate those PCs or devices. If any server becomes compromised, I can isolate it as well, which is a wonderful feature of Illumio.

The best feature Illumio offers, in my opinion, is the visibility map, which provides a useful end-to-end traffic connection. It gives details at a granular level about what applications are communicating inside your network, making it easier to create policies. Once you know the communication paths and identify the legitimate users, you can effectively prepare those policies.

The granular visibility provided by the visibility map changes the way we manage network security or policy creation by allowing us to directly refer to nano-segmentation. We can see which specific ports are being accessed, enabling us to segregate or segment the policy rules based on those security ports. This allows for more granular control over communication, tightening security. We have two modes of enforcement in Illumio; before applying enforcement rules, we utilize visibility to get details of the traffic, draft our policies, and ensure the targeted audience is met before enforcement. Initially, we allow traffic and then block everything else except the allowed policies on Illumio, which helps tighten the security of the east-west traffic within our network.

I observed another important feature in Illumio—it is not just replacing the perimeter firewall. A perimeter firewall provides a different level of security, whereas Illumio controls the local firewall. Illumio coexists with other non-Illumio processes that control the local firewall, and in that scenario, it can detect and alert users about local firewall tampering, allowing for better control over workloads.

Illumio positively impacts our organization through granular level segmentation of communication traffic. Initially, security controls depend on the network and applications, but with Illumio, we manage how one host communicates to another and the necessary paths that need to remain open, which reduces unauthorized communications. If any devices are compromised, Illumio instantly notifies us and isolates dangerous hosts, decreasing the spread of ransomware or other threats.

The best feature that Illumio offers is that we can easily understand how to label the applications, how to install Illumio agent on the client machines, how to install the agent on the servers, and how to do the ring-fencing. The log analysis is very simple, and we can map the traffic very easily, such as the traffic view and map view. We have many views to do that, and then we have a topology environment where we can expand the topology and understand how we want to prepare our policy based on the requirement. These are some of the very good use cases that Illumio provides, which none of the other vendors can offer in such an easy and usable way.

The most important feature is the traffic review analysis, where we use the draft view and the reported view that helps us understand how the application interacts with other applications in the environment, and based on that, we are able to define the policies.

It has increased the business for the organization. We are creating business by supporting the client. The client is getting more security and is more confident in their network because they now have the micro-segmentation feature in their environment. This is new technology and that's how it helps the organization as a whole. The clients we support are benefited, and at the same time, we are making money out of it. This is definitely a good approach.

After implementing Illumio, there has been significant progress. Most of the app owners now understand what applications are communicating, how these applications interact with others, and we are more aware of which application is talking to what other servers and applications, and their roles. For instance, whether an application is talking to the DB server or an app server. We have a more granular understanding of the traffic view. Additionally, after implementing Illumio, there is greater segmentation, and fewer incidents are occurring. There have been times when an attack was halted from expanding laterally.

The advantages of Illumio really stand out because they are not using the kernel module. The biggest thing is that the agents used, the software that goes onto the PCs or the servers, is not as comprehensive as that of Akamai. This might be better for some companies that want a light agent instead of a thick agent.

Illumio has some VPN features and encryption features that are not available in Guardicore.

Illumio's ability to contain threats through secure segmentation is positive. I would say it's a good part here.

They have some features that are not available in Akamai Guardicore.

Illumio offers great features such as controlling east-west traffic within data centers and clouds, enforcing segmentation policies between workloads, and reducing the attack surface by limiting unauthorized lateral movement.

Illumio's segmentation rules without requiring anything are pretty unique. It also integrates well with other security tools, giving you a centralized view of policy enforcement across your environment. If you're looking for east-west traffic control and zero-trust architecture, it's a great fit.

From what I have seen, Illumio positively impacts organizations by giving them a much clearer picture of their internal traffic, allowing them to identify risky connections they didn't see before. It also speeds up compliance, as I have heard, since they can enforce least privilege rules across their environments much faster. By reducing lateral movement, it just makes their overall security posture a lot stronger.

Illumio is a very good tool that is flexible, with policies written using labels such as environment, application, role, and location rather than IP addresses, making policy management scalable and easy to maintain in dynamic environments. However, the initial setup requires careful planning, and improperly configured policies can block communications between applications. Troubleshooting may require a deep understanding of traffic logs and flow data, alongside previously written policies. Additionally, agent dependency is a consideration since any agent-related issues can affect policy application, making proper monitoring of agent health crucial. Overall, Illumio is a powerful tool for micro-segmentation and zero trust security that provides strong visibility, flexible policy management, and effective threat containment, enhancing an organization's internal security posture. It is not just a security tool but a strategic solution for modern infrastructure security that can significantly reduce the risk of lateral movement and improve overall network security with proper implementation.

The best features Illumio offers include real-time control of traffic between servers and allowing required communication based on specified ports while blocking unwanted ports. It provides breach containment, preventing communication on unapproved ports, and offers full visibility of traffic flows that helps in troubleshooting and audits, with traffic mapping generated by a central controller that analyzes and creates policies based on labels instead of IPs. Policy management is highly scalable, and the lightweight agent can be easily installed on each server, enabling policy simulation to check impact before enforcement using a draft view.

These features are incredibly valuable, including predefined templates that save time and reduce manual errors, resulting in massive scalability that is suitable for larger enterprises, which represent the best features of Illumio for micro-segmentation and real-time visibility.

Illumio Segmentation's best features are the labels that allow us to segregate all the applications based on them.

Those labels help me in my daily work and in managing my applications by allowing us to decide the role, the application name for that label, location, OS, environment, and all those things, considering there are hundreds of applications in our organization.

Illumio Segmentation has positively impacted my organization by segregating and stopping hackers from doing lateral movement from one application to another, which is a great feature that Illumio Segmentation micro-segmentation provides.

The strongest aspect of Illumio is the visual traffic interface, which allows us to see all traffic that communicates with our servers and allied companies. We can write rules that can be embedded into the IP table, making it easy to handle. 

Illumio enables us to see network flows, traffic sources, and destinations. The policy generation and enforcement capabilities are valuable, allowing for selective enforcement. Illumio helps in audit purposes by saving data and showing blocked traffic, ensuring no outside traffic is allowed.

Zero-trust is the default operation with Illumio Segmentation. When you start to deploy it, you already begin to listen for the traffic that should not be allowed, because Illumio Segmentation by default is zero-trust but not enforcement. As you start Illumio Segmentation, you begin to see what happens in the networking and what kind of traffic you should not allow to work. It is easy to deploy and understand what happened, and very easy to go and block everything if you want. Additionally, because of the visibility correlation, if you define one asset to not be able to receive some kind of traffic, it is ready to make a correlation with the source of the traffic to look for other assets that receive the same kind of traffic, helping to understand what happened in your network. The zero-trust and visibility operations are incredible features, and I think it is the best way to use that.

Illumio Segmentation is deployed in my organization in a hybrid cloud environment, and I have another customer who operates totally in the cloud. The product fits very well in both cases, as it is very strong in that aspect. I can say it is the best solution on the cloud because it is the only one that really has features from Oracle, making it adaptable in all environments.

Illumio Segmentation has had a positive impact on my organization, as it has created a very impressive impact because it is a worldwide operation. Even though they deployed it only in Brazil, they are already looking to expand to other countries because of the results. They are achieving amazing results, specifically because on the OT side, the features of Illumio Segmentation are very easy to deploy and have no impact on operation.

I have seen specific results since deploying Illumio Segmentation, such as better visibility and less risk, because nowadays they know what kind of traffic happens in the OT environment and have already blocked it. They are not sure what could happen because they blocked that. Now, they are able to understand what happens in networking without risks. I am talking about an operation where a failure can lead to a disaster, such as an explosion or electrical power crash. Last year in this company, there was a very high incidence involving damage to people, but nowadays they feel more confident that they can manage the risks in the operation.

In my opinion, the best features Illumio Segmentation offers are that it is not an inline solution; it is an application, allowing you to start and stop Illumio Segmentation, rebuilding everything without stopping the services on the operation or the environment. It is a transparent operation, and the zero-trust and monitoring features are incredible, making it a very easy solution that does not consume a strong fingerprint, resulting in less CPU and less memory.

The most valuable features of the solution are the maps and the security build it offers. The tool helps with my company's security posture.

The feature that I have found most useful is the ability to centralize all the rules and then distribute them across various locations. However, I've encountered challenges related to tagging policies, which can be complex to devise. It's a matter that requires careful consideration and stakeholder involvement before implementing such policies.       

Everything is valuable in Illumio. We love the product.

The auto policy writing is great. The feature will give you the option of the inbound-outbound traffic. 

The Explorer allows you to know the traffic between source and destination. 

We have a feature called parallel coordinates. There, we can see what application is talking to which application and where a single application is talking to many applications. 

The illumination definitely stands out. Mapping is great. The application group mapping is useful. 

It's straightforward to set up.

The dependency map is most valuable aspect.

The solution helps to maintain logs and monitor activities. It also helps us with access management. The tool helps us to secure organizational data that include files. 

The most valuable feature of Illumio Adaptive Security Platform is monitoring. When I have no requirement from the other application, I can use the web block traffic to build.

The solution is easy to use. 

Visibility is the most valuable feature of the solution. The product provides visibility into how the applications communicate and how the network protocols are being used. We can also block protocols such as RDP, NetBIOS, and ransomware attacks.

The flexibility of the solution is its most valuable feature.

The ability to operate inside the real technology has been excellent.

The solution's concepts are quite simple.

Application Dependency Map.