Skip to main content

Illumio Administration Guide 26.x

VEN Status Command and Options

This topic describes the VEN status command and its arguments. Log in as root to run these commands.

  • AIX, Linux, Solaris: /opt/illumio_ven/illumio-ven-ctl status [health | policy | connectivity]

  • Windows: "C:\Program Files\Illumio\illumio-ven-ctl.exe" status [health | policy | connectivity]

Note

Output varies by operating system and enabled features.

Subcommand and arguments

Output

Description

status

AIX, Linux, and Solaris VENs

Checking Runtime Environment..........
Status for illumio-control: 
 - Environment Illumio VEN Environment is setup
 - venAgentMgr venAgentMgr is running
 - IPSec IPSec feature not enabled
 - venPlatformHandler venPlatformHandler is running
 - venVtapServer venVtapServer is running
 - venAgentMonitor venAgentMonitor is running

Agent state: illuminated

Windows VENs

Service venAgentMonitorSvc:    Running
Service venAgentMgrSvc:        Running
Service venPlatformHandlerSvc: Running
Service venVtapServerSvc:      Running
Service venAgentMonitorSvc:    Enabled
Service venAgentMgrSvc:        Enabled
Service venPlatformHandlerSvc: Enabled
Service venVtapServerSvc:      Enabled

Agent State: illuminated
Agent Type: endpoint
client_cert_label: "C=US, O=Illumio, CN=VENClient-Win11-3"

Checks the VEN runtime environment and reports whether or not individual VEN components are running and whether indvidual features are enabled, and reports the agent state.

Agent states returned by executing the illumio-ven-ctl status command argument differ from VEN states and Workload Enforcement states displayed in the PCE UI. The terms shown in ctl status output map to the Workload Enforcement States in the PCE UI as follows:

CTL Output

Workload Enforcement States in PCE UI

illuminated

Visibility Only

enforced

Full Enforcement

idle

Idle

status health

AIX, Linux, Solaris, and Windows VENs

{
  "results": [
    {
      "test": "VEN has write access to the log directory",
      "result": "pass"
    }
  ],
  "state": "healthy"

Runs VEN health checks and reports the result of each check.

VEN health status ("healthy" or "unhealthy"). A “healthy” state means the VEN can write logs locally.

status connectivity

AIX, Linux, Solaris, and Windows VENs

{
"last_successful_hb": "2026-09-22T10:20:15-07:00",
"time_now": "2026-09-22T10:23:43-07:00",
"connectivity": {
"pce": "pce.example.com",
"port": 8443,
"ips_returned": 1,
"results": [
{
"ip": "192.0.2.10",
"http_code": 204,
"result": "pass"
}
]
}
}

Reports the most recent successful heartbeat time, the current VEN time, and connectivity-test results for the configured PCE endpoint. The output identifies the PCE hostname and port, the number of IP addresses returned, and the result and HTTP response code for each tested IP address.

status policy

AIX, Linux, Solaris and Windows VENs

{
"state": "illuminated",
"id": "example-workload-id",
"timestamp": "2026-09-18T08:55:52.504-07:00"
}

Reports a policy-related state, an associated identifier, and a timestamp.