Overview
The Migration Readiness Assessment helps customers moving from another segmentation platform to Illumio reuse the work already done in that platform instead of starting over.
Customers leaving another segmentation product usually have useful information in it: workload inventories, classification schemes, grouping constructs, IP-based objects, and sometimes policy. Rebuilding that from scratch slows the Illumio deployment and wastes investment the customer has already made. Much of it can be extracted and converted into a format the Illumio platform can use.
Illumio Professional Services reviews the customer's existing segmentation deployment and extracts its configuration using Illumio-developed tooling and a standard methodology. PS then converts the usable data into Illumio-ready formats. The most valuable output is usually asset data. It produces the list of workloads for VEN deployment and gives a head start on label design. Where the previous platform has working policy, PS reviews it to a limited degree and translates the usable parts into Illumio constructs.
This engagement runs alongside Platform Foundation Deployment and Labeling and feeds both. When it is complete, the customer has converted asset, classification, and object data ready for use in Illumio, and a documented plan for moving off the previous platform.
Prerequisites
Package Dependencies
- Platform Foundation Deployment, completed before or delivered alongside this engagement
Strongly Recommended Packages
- Labeling
- Segmentation Strategy & Roadmap
Optional Supporting Packages
- Discovery
This engagement is delivered during the Platform Foundation Deployment and Labeling phases. Converted asset data supports VEN deployment, and converted classification data supports label design.
Technical Readiness
- The existing segmentation platform is operational and accessible
- Read or export access to the existing platform's configuration, objects, and policy
- Access to related automation, CMDB, or ticketing integrations, where they are used to maintain objects
- Operational Illumio platform, or one being deployed at the same time
Customer Readiness
- Project manager or primary point of contact assigned
- Existing platform administrators identified and available
- Existing platform documentation available, where it exists
- Transition goals and timeline identified
Covered Services
Existing Environment Assessment
- Review the customer's segmentation goals and requirements as implemented in the existing platform.
- Determine the maturity of the existing segmentation deployment.
- Identify the classification dimensions in use, such as application, environment, role, location, and operating system.
- Identify how workloads are associated with those dimensions, such as VM names, operating system versions, raw IP addresses, and tags.
- Identify the automation, CMDB synchronization, pipelines, or ticketing systems used to maintain objects.
- Identify the platform's security model: default-deny, default-allow, or hybrid.
- Review how workloads spanning data centers are represented and how cross-data-center communication is controlled.
Customer Outcome
The customer has a documented understanding of how its existing segmentation deployment is structured, how mature it is, and which parts are worth carrying forward.
Data Extraction and Analysis
- Extract configuration data from the existing platform.
- Catalog workload inventory, grouping constructs, IP-based objects, service objects, and rules.
- Identify policy conditions that need special handling, such as scoping constructs, negated selections, and raw IP usage.
- Map how existing policies and rules represent security enclaves and specific traffic controls.
- Assess the quality and usability of the extracted data.
Customer Outcome
The customer's existing segmentation data has been extracted, cataloged, and assessed for usability in Illumio.
Data Conversion
- Convert the extracted workload inventory into an asset list for VEN deployment.
- Map existing classification constructs to proposed Illumio labels to inform label design.
- Map IP-based groups and objects to candidate Illumio IP Lists.
- Where the existing platform has usable policy, translate a limited portion into draft Illumio rulesets.
- Validate the converted output against the source data.
- Document any data that could not be converted, and why.
Customer Outcome
The customer receives Illumio-ready asset classification, and object data. This speeds up VEN deployment and label design by building on existing work.
Transition Planning and Handoff
- Define a phased approach for moving from the existing platform to Illumio with minimal operational disruption.
- Document how the converted data feeds Platform Foundation Deployment, Labeling, and later policy work.
- Provide guidance on bringing Illumio PCE APIs into the customer's existing automation workflows.
- Provide documentation of the extracted data, the conversion mappings, and data that was not converted.
- Review findings, converted output, and the transition plan with customer stakeholders.
Customer Outcome
The customer has a documented transition plan and converted data it can use to move off its previous segmentation platform with confidence.
Expected Timeline
This engagement is delivered alongside Platform Foundation Deployment and Labeling. The delivery schedule is set at project initiation based on:
- Purchased package size
- Number of workloads in the existing platform
- Number of existing policy elements and objects
- Complexity of the existing platform's configuration
- Availability of platform access and administrators
- Customer review cycles.
Delays in platform access, data export, or administrator availability may affect this engagement and the related Platform Foundation and Labeling work.
Get Started
Talk to our Sales team to learn more about Services.
Explore our Professional Services at illumio.com/services/professional-services
