Meet Illumio at Microsoft Ignite 2026
AI will be the headline at Microsoft Ignite 2026. For security teams, the harder question is what happens after an attacker gets in.
Illumio is bringing that question to Microsoft Ignite 2026, November 17–20 at Moscone Center in San Francisco. We’ll be there all week at Booth 5340. We’re bringing live demos of Illumio Insights in Microsoft Sentinel, a session from our Chief Product Officer, and a couple of fun reasons to find us at the MISA events after hours.
Our answer: see and stop lateral movement inside the Microsoft tools your team already uses. Every demo, session, and conversation we have at Ignite comes back to that idea. Here’s how to plan your time with us.
Why attend Microsoft Ignite 2026?
Ignite is Microsoft’s biggest gathering of the year for the people who build, run, and secure its technology. Security runs through the whole week. It starts with Microsoft’s Security Pre-Day on Monday, November 16, 1:00–5:00 PM PT. The opening keynote with Satya Nadella and Judson Althoff follows on Tuesday, November 17, 10:00 AM–noon PT at Chase Center.
Microsoft’s guide to security at Ignite 2026 has the full lineup.
What to expect from Illumio at Booth 5340
Booth 5340 is our home base for the week, and it’s the easiest place to see breach containment up close. Our product experts will walk you through real attack scenarios.
Here’s what you can do at the booth:
- Watch a live Illumio Insights demo. See how Illumio Insights surfaces risky east-west connections across hybrid and multi-cloud environments and highlights where an attacker could go next.
- Get a tour of the Illumio platform. Find out how Illumio Insights and Illumio Segmentation pair visibility with enforcement, so one compromised workload stays one compromised workload.
- Compare notes with peers. Swap stories with other security teams about how they’re cutting risk and simplifying audits.
- Reserve a meeting time. Planning a packed week? Book a meeting in advance, and we’ll match you with the right expert.
Breach containment inside Microsoft Sentinel and Security Copilot
If your security operations center (SOC) lives in Microsoft Sentinel, our booth demo will feel familiar. We'll show how Illumio findings appear right next to the Microsoft data your analysts already review.
Illumio for Microsoft Sentinel feeds lateral traffic findings from Illumio Insights into the Sentinel data lake and security graph. From there, analysts can use the Illumio Security Copilot Agent to ask plain-language questions about suspicious connections, follow an attacker's likely path, and isolate affected workloads without switching consoles.
Microsoft also trusts Illumio on its own network. The company runs Illumio Insights and Illumio Segmentation across its entire corporate IT environment. Igor Tsyganskiy, Microsoft's Global CISO, said Illumio was “the only segmentation solution that would work at the scale of Microsoft.”
Microsoft has recognized the partnership in other ways, too. Illumio Insights was one of the first products available in the AI Apps and Agents category on Microsoft Marketplace, and in January 2026, Microsoft named Illumio Security Software Development Company of the Year at its Security Excellence Awards.
Speaker spotlight: Mario Espinoza on AI and lateral movement
Illumio Chief Product Officer Mario Espinoza will take on a question every security team is asking: what does frontier AI change for defenders? His session is called “AI Changed What Attackers Find. It Didn’t Change How They Move.”
Attackers can now spot weaknesses and turn them into working exploits faster than ever. Getting from an entry point to the data they’re after still means hopping from system to system, though, and that movement leaves a trail in network traffic.
Mario will walk through how Illumio Insights reads that trail across cloud and on-premises environments to flag lateral movement risk, confirm your segmentation is doing its job, and point your team to the fixes that matter most.
Add the session to your agenda.
Find Illumio at MISA events during Ignite week
As a member of the Microsoft Intelligent Security Association (MISA), Illumio is taking part in two MISA events at Ignite:
- Secure the Night party on Tuesday, November 17: Microsoft’s evening party for the security community, at The Palace Hotel, is a fun way to unwind after day one. Illumio is one of the MISA partners sponsoring it, and we’re running the candy station, so come find us for a sugar boost and a chat.
- MISA Demo Station on Wednesday, November 18, 11:00 AM–1:00 PM PT: Catch another round of Illumio demos at the MISA Demo Station in the Expert Meetup Hub on the show floor. It’s an easy stop between sessions.
How Illumio works with Microsoft security tools
Not heading to San Francisco this year? Here’s a quick look at the three ways Illumio connects to the Microsoft ecosystem.
Microsoft Sentinel 向け Illumio
Illumio for Microsoft Sentinel is built for SOC teams that run on Sentinel. It pairs the Illumio view of east-west traffic with signals from Microsoft Defender, Microsoft Entra, and Microsoft Purview. So analysts can connect a suspicious sign-in to the network connections that followed it.
Learn more about Illumio for Microsoft Sentinel.
Illumio for Microsoft Azureファイアウォール
Illumio for Microsoft Azure Firewall is built for cloud and network teams managing Azure. It gives you one view of traffic moving within, into, and out of your Azure environment, lets you write policies based on application context, and shows you what each rule will do before you turn it on.
Learn more about Illumio for Microsoft Azure Firewall.
Illumio Insights on Microsoft Marketplace
This option is for teams that want to move quickly. Because Illumio Insights is sold through Microsoft Marketplace, you can get up and running in minutes. Eligible purchases count toward your Microsoft Azure Consumption Commitment (MACC).
Try Illumio on Microsoft Marketplace.
See you at Microsoft Ignite 2026
Attackers will keep getting faster at finding a way in. What they do next still depends on moving laterally. That’s where breach containment keeps one intrusion from becoming a full-blown breach.
Ignite opens November 17. Stop by Booth 5340, catch Mario’s session, and see how Illumio and Microsoft help your team stop an attack before it spreads. And if you need a sugar boost Tuesday night, you know where to find us.
始める準備はできましたか?
- 登録する to attend Microsoft Ignite 2026.
- 会議をリクエストする Microsoft Ignite で Illumio と対談。
- Illumio Insightsを試す 無料で。





.webp)