How it works
Stop lateral movement in your data center and cloud environments with Illumio Core™ (formerly known as Illumio ASP). See how applications are communicating, get vulnerability exposure insights, then take control. Create segmentation policies that work on anything – bare-metal, virtual machines, and containers.
With an architecture that allows you to use the enforcement points that already exist in your infrastructure, Illumio Core delivers segmentation without complexity. No additional hardware or re-architecting your network.Learn more
Virtual Enforcement Node (VEN)
Not just any lightweight agent – acting more like an antenna than an agent, the VEN is a core component of Illumio Core. It sends and receives information, programs pre-existing enforcement points, and detects policy violations.Learn more
Policy Compute Engine (PCE)
The "brain" of Illumio Core. The PCE builds a live map using the information shared from the VEN showing how applications are communicating and creates optimal segmentation policies based on those insights.Learn more