Cloud

1.

Agentless Containers

Illumio Segmentation for the Cloud now extends security to Kubernetes containers, delivering visibility and control for both cloud-managed and self-managed Kubernetes clusters. Use advanced filtering and dynamic mapping capabilities to navigate large-scale Kubernetes environments and pinpoint clusters, nodes, namespaces, and workloads. The onboarding process is streamlined to allow rapid integration of new Kubernetes clusters with Illumio Segmentation for the Cloud. Once you onboard your clusters, Illumio Segmentation for the Cloud provides insights into your containerized inventory, application dependencies, and network traffic patterns. These insights help you enforce security postures and microsegmentation policies across dynamic workloads.

See Agentless Containers overview.

See Onboard and Offboard Kubernetes Clusters.

See Navigating the Map Kubernetes View.

See Kubernetes Resources Inventory.

See Illumio IP addresses accessed by the Kubernetes Cloud Operator.

1.

Policy

The Policy Preference page now lets you set your preferences for enforcement points to include Azure Firewalls, along with subnet and NIC NSGs. See Policy preferences.

Contact your Customer Success and Account teams to request access to this feature.

2.

Resources

NOTICE: Illumio Segmentation for the Cloud no longer supports Azure network IP configurations as a visibility-supported resource type. However, the Inventory resource details tab for Microsoft network interfaces will still display network IP configurations as applicable.

See Illumio visibility for resource types.

See Inventory Details.

1.

Terraform for Applications

You can create a Terraform onboarding application and use it to onboard Azure subscriptions. Use Terraform to save time and effort instead of manually onboarding.

See Create a Terraform Illumio Onboarding Application for Azure.

See Onboard an Azure Subscription using a Terraform Illumio Onboarding Application.

2.

Policy

You can write policy using Azure Firewalls. This allows you to define and apply network and application level security rules across multiple virtual networks and subscriptions. This also allows you to effectively manage all traffic filtering from a single point of control through its centralized policy management capabilities.

See Writing Azure Firewall policy.

This is a beta feature. Review the beta terms and conditions on the Illumio website.

You can now use Terraform to create, edit, and delete tag to label mappings, deployments, and applications. For applications, you can also use Terraform to auto-approve, allow cloud service source metadata, and populate a field with a list of deployments for the application definitions. Using Terraform saves you the time and effort of manually performing the work.

See the Illumio Terraform website.

You can now get a clear view of your Azure Firewall inventory, with details about your firewalls and their current policies. Gain insights into your firewall network flows using the Traffic page, and see a visual representation of your firewall hub and spoke topology in the Map. Click on traffic paths in the Map to see traffic between firewalls and connections between VNets and clouds. In addition, you can now use Azure Firewalls to enforce policy on VNets.

See Azure Firewalls Overview.

See Navigating Azure Firewalls.

See Inventory.

This is a beta feature. Review the beta terms and conditions on the Illumio website.

You can now enforce policy using Azure Firewalls.

See Illumio visibility for resource types.

See Policy enforcement and resource types.

This is a beta feature. Review the beta terms and conditions on the Illumio website.

1.

Visualization

The Traffic page now has a time slider visualization that shows the total number of active flows for any time period you specify. You can zoom into a given time period and view detailed information about the flows such as flow status, the source and destination, and the times when the flows were detected.

See Search traffic.

1.

Visualization

Cloud now lets you drill down into EKS Clusters using the Resource Map tab. Use it to view your EKS Clusters' Node Groups and individual EC2 instances along with their traffic.

See Navigating AKS, EKS, and GKE clusters.

Updated: You can now also enforce policy on EKS Clusters.

See Policy enforcement and resource types.

2.

Documentation Updates

Download the combined User Guide and Release Notes PDF from the top navigation pane.

1.

Connector

Illumio Segmentation for the Cloud's Connector feature now lets you choose between CSV and JSON formats when exporting data to an onboarded S3 bucket.

See Connector.