Minimize Environmental Changes During the Migration
Illumio recommends that you don't make any policy adjustments during the on-prem to SaaS migration.
Review these recommendations based on the VEN state.
Note
Creation, Updating, and Deletion of Policy objects (such as new rule sets, rules, labels, IP Lists, etc.) should be performed on-premises and replicated to SaaS.
VEN State | Policy Update | Label Update | VEN Tracking in Opposite Environment |
|---|---|---|---|
VENs on-prem that have not been moved to SaaS | Policy should be updated on-prem | Labels of the workload/configurations of the VEN are updated in SaaS | VENs tracked by a cloned managed workload in the opposite PCE |
VENs moved to SaaS that were previously on-prem | Policy should be updated on-prem | Labels of the workload/configurations of the VEN are updated in SaaS | VENs tracked by a cloned managed workload in the opposite PCE |
VENs that are newly paired to SaaS (these are not supported, as they are not synced by the sync tool, copying updates from on-prem into SaaS) | Not Supported | Not Supported | NA |
Phase 2 VENs (VENs added on-prem after the database backup) | Policy is updated on-prem | Labels/configurations are updated on-prem | (need validation) |