Illumio
Illumio
Illumio Core: Workload registration completed in 2 easy steps
Introduction
In the previous article, we introduced the basic steps for implementing microsegmentation using the Illumio Core product. The first step is to register the workload.
Workload registration for Illumio Core products can be completed in two steps:
- PCE management screen: Paring Profile settings
- Each workload: Pairing script execution
The above steps complete the settings required for Workload registration, such as downloading the VEN installer to the servers and client terminals to be managed, installing VEN, pairing with PCE, etc. This procedure will not cause an OS restart or affect communications on the Workload.
*If you select selective control/full control mode when specifying the communication control mode during initial setup, communication control will start as soon as the setup is complete.
In this article, we will introduce the steps required to register Workload.
premise
The functions and settings described in this article are based on the latest version as of June 2024.
Setting method
- PCE management screen: Paring Profile settings
- Set the Pairing Profile on the PCE management screen.
Specify the communication control mode during initial setup, the label to be assigned, etc.
- Once you have completed the Pairing Profile setup, a Pairing Script for the OS type will be issued. This Pairing Script contains the PCE environment information and activation code for the pairing destination.
- Each workload: Pairing script execution
- On the server or client device to be managed, execute the Pairing Script issued in ①. When the Pairing Script is executed, the VEN installer is downloaded, VEN is installed, pairing with PCE and initial policy settings are performed all at once. Note that this process does not require an OS reboot.
- Once the Pairing Script has been executed, it will be automatically registered as a Workload and its information will be available on the PCE management screen. In addition, depending on the Pairing Profile settings, the communication control mode will be set, labels will be added, and information on communications occurring on the Workload will be collected.
Supplementary matter
- When registering a large number of hosts into Workload, you can reduce the amount of work required by utilizing the functions of existing IT asset management products and executing the Pairing Script all at once.
- By registering the workload using the Paring Script, you can perform VEN upgrade operations from the PCE management screen. The upgrade operation does not restart the OS or affect communication control.
- In addition to the above method, you can also place the VEN installer on the target host and manually install and activate it.
in conclusion
In this article, we introduced the steps for registering a workload in Illumio Core products. We hope you have learned that installing VEN and setting up the initial settings can be achieved with very simple operations.
In the next article, we will show you how to check visualized communications.
Inquiry/Document request
In charge of Macnica Illumio Co., Ltd.
- TEL：045-476-2010
- E-mail：illumio-info@macnica.co.jp
Weekdays: 9:00-17:00