Illumio Segmentation for Containers

E-128186

Kubelink: Outbound traffic allowed on enforced source without explicit rules

Resolved an issue when traffic allowed to cluster services could leak outside of its defined scope. The enforcement logic now ensures that without explicit allow rules, the default deny behavior applies.

E-129228

C-VEN: HTTP Proxy variable during Helm deployment

C-VEN now uses solely HTTP proxy if the httpProxy variable is set during Helm deployment.

116112

CLAS/C-VEN: Flow reported as unknown instead of blocked

Resolved an issue when traffic from a pod to an unmanaged VM without a rule resulted in a flow that reported as unknown instead of blocked.

E-110467

CLAS/C-VEN: Flow reported as blocked instead of allowed

Resolved and issue when traffic from pod to a VM via FQDN list rule resulted in a TCP flow that reported as potentially blocked instead of allowed.