Integrations

Provides three ASIM Parsers: Audit Parser, Network Session Parser, and Authentication Parser

Provides six Analytics Rules: Illumio VEN Deactivated Detection Rule, Illumio Firewall Tampering Analytic Rule, Illumio VEN Clone Detection Rule, Illumio Enforcement Change Analytic Rule, Illumio VEN Offline Detection Rule, and Illumio VEN Suspend Detection Rule

Enhancement to the function app: You can select the type of network traffic to be ingested. The types are blocked, allowed, potentially blocked, and unknown.

Supports Core PCE SaaS

Azure Function Apps for data ingestion. Ingests audit events and traffic flow logs from Illumio PCE.

Provides three workbooks: Auditable Events, Traffic Flow, and Workload and Agent Status