• Want to minimize damage from ransomware and lateral movements
• I want to break away from passive security measures that rely on "detection"
• I want to reduce unnecessary communication between servers in advance.

illumio is a microsegmentation solution that controls communication between servers, clouds, and endpoints.
By controlling communication on a host-by-host basis, unnecessary communication can be reduced and threats can be prevented from freely propagating through the corporate network.
If countermeasures that rely solely on "detection" are used, the threat will spread until it is detected and responded to, so it is possible to prevent damage such as ransomware by dividing the threat into segments and "containing" the threat.

[Point 1] Achieving micro-segmentation in any OS environment

• Compatible with a wide range of server OS such as Windows, Linux, IBM AIX, Oracle Solaris, etc.


• Compatible with modern infrastructure environments such as IaaS/containers such as AWS and Azure


• Segmentation can be extended to endpoint devices such as PCs

[Point 2] Lightweight agent that is easy to install

• A lightweight agent that does not put a load on servers or endpoints.


• In order to utilize the existing OS built-in FW function as is, iilumio itself only issues instructions.


• Runs in user space so does not require reboot (does not involve kernel)

[Point 3] Complement and coexist with existing zero trust solutions

• Complements and coexists with the various zero trust solutions you are currently using (IDaaS, SASE, EDR, etc.)


• It is possible to prevent the spread of threats by containing them with illumio until they are detected by EDR etc.


• Can be integrated and operated with existing SIEM solutions such as Splunk