Licensing and Usage for Illumio Segmentation
Illumio Segmentation license usage is measured using the number of Segmentation Workloads (SWL). SWLs are calculated based on the number and type of resources in your environment that are supported for segmentation.
Each resource is mapped to an Illumio Resource Type and grouped using these categories:
Cloud Resources
Data Center Resources
Endpoint Resources
Cloud Resources
Illumio Segmentation has 7 resource types for cloud resources. Each resource type groups similar resources from different Cloud Service Providers (CSPs) together. As each CSP follows its own naming conventions, this table shows how their resource names match up with Illumio’s resource types for Segmentation.
Illumio Resource Types | AWS | Azure | GCP |
|---|---|---|---|
Cloud virtual machine | EC2 Instances (exclude VMs running containers) | Virtual Machines, Scale Sets Virtual Machines (exclude VMs running containers) | Compute Instances |
Cloud container | EC Instances running Containers, EKS Cluster | VMs running Containers, Managed Clusters (AKS) | |
Cloud database | Memory DB Cluster, RDS DB Cluster and DB Instance, ElastiCashe Cluster, Redshift Cluster, etc. | SQL Servers and ManagedInstances, Mongo Clusters, DatabaseAccounts, PostgresQL servers, etc. | |
Cloud storage | Storage Accounts, etc. | ||
Cloud firewall | Azure Firewalls | ||
Serverless function | Lambda Functions | Sites, Functions | |
Network routing and resource management | Load Balancers | Load Balancers | |
Network security and management | KeyVault |
Data Center Resources
Illumio Resource Types | Definition |
|---|---|
Standard Server OS | Number of Servers running non-legacy operating system |
Legacy OS | Servers running supported legacy operating systems:
|
Oracle Exadata Database | Oracle Exadata database instances |
Container Host | All the nodes in a Kubernetes cluster when using Illumio Containerized VEN (C-VEN) |
Switch Port | Number of managed IPs on a switch |
Load Balancer | Number of virtual IPs connected to a load balancer |
IBM i-series LPAR | Number of IBM i-series LPAR (Logical Partition) |
IBM zLinux IFL | Number of IBM zLinux Integrated Facility for Linux (IFL) |
IBM zOS LPAR | Number of IBM zOS LPAR (Logical Partition) |
Endpoint Resources
Illumio Resource Type | Definition |
|---|---|
Endpoint | Count of virtual or physical desktops or laptops |
Determining Segmentation Resource Count
To estimate resource count by resource type in your environment, run the resource count script provided by your technical contact at Illumio. If you have onboarded your cloud subscription, you can view the actual resource count under the Usage menu (Usage > Illumio Segmentation tab > Usage Details).
Daily, Weekly, and Monthly Averages
Cloud resource counts are taken every hour.
To calculate daily usage, the average of the hourly counts over the past 24 hours is used. The monthly average resource count is then calculated by averaging the daily usage values across all days in the month.
Since cloud resources can scale up or down throughout the day, using averages helps mitigate short-term usage spikes and reduces the risk of overage charges.
Data Center and Endpoint resources are metered daily. Their monthly average is calculated by summing the daily counts for the month and dividing them by the number of days.
If your Illumio Segmentation implementation is on-premises, you will be asked to provide usage information to Illumio on a quarterly basis at a minimum.
Converting Resource Count to Segmentation Workloads
After you have determined the number of resources in your environment, Segmentation for the Cloud Workloads (SWL) are calculated using these conversion ratios:
Use the workload calculator on Illumio’s website or find it listed in the Usage menu (Usage > Workload Calculator > Illumio Segmentation tab) to convert your resource count into Insights Workloads.
Cloud | Illumio Resource types | Conversion Ratio |
|---|---|---|
Cloud Virtual Machine | 1 Resource = 1 SWL | |
Cloud Container | 1 Resource = 2 SWLs | |
Cloud Database | 1 Resource = 1 SWL | |
Cloud Storage | 10 Resources = 1 SWL | |
Cloud Firewall | 1 Firewall = 100 SWLs | |
Serverless Function | 50 Functions = 1 SWL | |
Network Routing and Resource Management | 1 Resource = 10 SWLs | |
Network Security and Management | 10 Resources = 1 IWL | |
Additional Data Processing * | 50 MB = 1 SWL | |
* For Cloud resources, each Segmentation Workload (SWL) includes 50MB of data processing per day. Exceeding this allowance is rare for typical workloads. If your usage exceeds the allowance, you can purchase additional SWLs for additional data processing. | ||
Data Center | Illumio Resource types | Conversion Ratio |
Standard Server OS | 1 OS = 1 SWL | |
Legacy OS | 1 OS = 2 SWLs | |
Oracle Exadata Database | 1 DATABASE = 10 SWLs | |
Container Host | 1 HOST = 6 SWLs | |
Switch Port | 1 MIP = 1 SWL | |
Load Balancer | 1 VIP = 1 SWL | |
IBM i-series LPAR | 1 LPAR = 10 SWLs | |
IBM zLinux IFL | 1 IFL = 15 SWLs | |
IBM zOS LPAR | 1 LPAR = 20 SWLs | |
Additional Data Traffic Retention** | 50 MB = 1 SWL | |
** For Data Center and Endpoint resources, each Segmentation Workload (SWL) includes 50MB data traffic retention. You can purchase additional data traffic. | ||
Endpoint | Illumio Resource types | Conversion Ratio |
Endpoint | 5 ENDPOINTS = 1 SWL | |
Additional Data Traffic Retention** | 50 MB = 1 SWL | |
Sample Calculation for Segmentation
Consider an environment with the following number of cloud resources on a monthly average:
Cloud Resources | |
|---|---|
Cloud Virtual Machine | 100 virtual machines |
Cloud Container | 50 hosts |
Cloud Database | 20 databases |
Cloud Storage | 10 storage |
Cloud Firewall | 1 firewall |
Serverless Function | 50 functions |
Network Security and Management | 5 resources |
Data Center Resources | |
Standard Server OS | 1000 OS |
Container Host | 50 hosts |
Load Balancer | 20 VIPs |
Use the Illumio Workload Calculator to determine the number of Segmentation Workloads you need.
Resource Coverage Expansion
Illumio continuously enhances its security coverage by adding support for additional resource types. When new resources are added to capabilities, they will be automatically included in your security coverage, which may increase your usage metrics and associated billing.
Tip
As a best practice, Illumio recommends that you review your usage dashboard regularly to manage your consumption effectively. Contact your Illumio account team with any questions about usage trends or billing impacts.