Minimize Environmental Changes During the Migration
Illumio recommends that you don't make any policy adjustments during the on-prem-to-SaaS migration.
Review these recommendations based on the VEN state.
Note
Creating, updating, and deleting policy objects (such as new rule sets, rules, labels, IP Lists, etc.) must be performed on-premises and replicated to SaaS.
VEN State | Policy Update | Label Update | VEN Tracking in Opposite Environment |
|---|---|---|---|
VENs on-prem that have not been moved to SaaS | Policy must be updated on-prem | Labels of the workload/configurations of the VEN are updated in SaaS | VENs tracked by a cloned managed workload in the opposite PCE |
VENs moved to SaaS that were previously on-prem | Policy should be updated on-prem | Labels of the workload/configurations of the VEN are updated in SaaS | VENs tracked by a cloned managed workload in the opposite PCE |
VENs that are newly paired to SaaS (these are not supported, as they are not synced by the sync tool, copying updates from on-prem into SaaS) | Not Supported | Not Supported | NA |