3 New Ways to Simplify Zero Trust Segmentation With Illumio

Cybersecurity needs are changing fast. Organizations must stay on top of the latest security technology developments and understand how to leverage existing solutions to combat the newest threats.

Illumio is continuously innovating and creating new ways to improve segmentation and make what has historically been a daunting project simple and approachable.

Here are three ways to use your Zero Trust Segmentation deployment to make your life easier.

1. Ransomware Protection Dashboard recommended actions

Our Ransomware Protection Dashboard helps you measure your risk, but did you know it can also help guide you on how to improve your protection score?

Key benefits: ‍

• ‍A guided experience: The dashboard's recommended actions help answer the question of "where do I start?” when beginning your segmentation project.
• Powerful visuals: Clearly understand which applications are at the highest risk so you can measure against business priorities to determine next steps and track over time how protection has improved.
• Rapid ROI: With recommended actions, you can build rules in minutes to drive measurable reduction in the risk of lateral movement of ransomware.

Another benefit is that when you select any app group, you can also get recommended actions and visualize the risk of that individual group.

Illumio makes it easy to plan protection for critical assets, work towards environmental separation, and implement Zero Trust Segmentation with clear visibility into where risk is and next steps to mitigate it.

2. Cluster Local Actor Store (CLAS) mode

CLAS was created with Kubernetes orchestrators in mind. We know that containers are ephemeral. They spin up or down to accommodate deployment needs and may last mere minutes, or in the case of a pod, even seconds.

CLAS mode focuses on Kubernetes workloads such as Deployment, StatefulSet, ReplicaSet, Services, etc. They are the Kubernetes resource types that define an application. This aligns segmentation policies with Kubernetes applications.  

Also, Kubelink is an intermediary between PCE and the agent. Kubelink programs policy at the Pod level. Any change to Pods within the application will be handled by Kubelink. This provides rapid response to workload and pod changes.

Key benefits:

• Scalability: Illumio knows scale; this extends to your Kubernetes environment. We understand that each deployment could have 1000s of containers or more that you’re managing. We’ve got you covered.
• Inherent protection: Pods and services inherit associated policies dynamically and come online fully secure, allowing DevOps teams to confidently deploy applications.  
• Faster responsiveness: With Kubelink now a full intermediary between the PCE and the C-VENs, and maintaining a store of workload data, the C-VENs report traffic directly to Kubelink, which then sends this information to the PCE. This enables Illumio to respond faster to changes in Kubernetes deployments.

3. Endpoint dashboard widgets

Multiple teams need to use Illumio, all with their own focus area. The latest enhancement to Illumio's VEN Statistics Dashboard introduces separate widgets for Server VENs and Endpoint VENs. This granular insight allows users to focus on the specific data relevant to their role.

Key benefits:

• Operational efficiency: The separation of widgets for Server VENs and Endpoint VENs enables users to quickly navigate and focus on the most relevant data.
• Deployment insights: By providing distinct insights for servers and endpoints, you can track deployments more precisely.
• Streamlined management: The added granularity makes it easier to manage large deployments that include both servers and endpoints.

Illumio is constantly adding new ways to improve the customer journey and help guide customers to Zero Trust Segmentation.

Want to learn more? Reach out today to hear how Illumio makes segmentation easy.