Minimize Environmental Changes During the Migration
Illumio recommends that you don't make any policy adjustments during the on-prem-to-SaaS migration.
Review these recommendations based on the VEN state.
Note
Create, update, and delete policy objects (such as new rule sets, rules, labels, IP Lists, etc.) on-prem and replicate them to SaaS.
VEN State | Policy Update | Label Update | VEN Tracking in Opposite Environment |
|---|---|---|---|
VENs on-prem that have not been moved to SaaS | Policy must be updated on-prem | Labels of the workload/configurations of the VEN are updated in SaaS | VENs tracked by a cloned managed workload in the opposite PCE |
VENs moved to SaaS that were previously on-prem | Policy should be updated on-prem | Labels of the workload/configurations of the VEN are updated in SaaS | VENs tracked by a cloned managed workload in the opposite PCE |
VENs that are newly paired to SaaS (these are not supported, as they are not synced by the sync tool, copying updates from on-prem into SaaS) | Not Supported | Not Supported | NA |