Illumio Breach Containment Platform

My main use case for Illumio Segmentation is security and visibility, as I am able to get a lot of visibility in networking, even in sites I don't know about, and it is a strong security solution.

For example, I am using Illumio Segmentation for visibility. If you have the Illumio agent in a network, even on devices that are not manageable, they will be able to understand the traffic around them, bringing information about the networking and remote networking to your operation. On the security side, Illumio Segmentation is a zero-trust operation, so it does not allow a connection that is not explicitly allowed. By default, it blocks everything. Nowadays, the best case I have is with OT environments in manufacturing that block every network that is not allowed to work inside the OT devices.

Zero-trust is the default operation with Illumio Segmentation. When you start to deploy it, you already begin to listen for the traffic that should not be allowed, because Illumio Segmentation by default is zero-trust but not enforcement. As you start Illumio Segmentation, you begin to see what happens in the networking and what kind of traffic you should not allow to work. It is easy to deploy and understand what happened, and very easy to go and block everything if you want. Additionally, because of the visibility correlation, if you define one asset to not be able to receive some kind of traffic, it is ready to make a correlation with the source of the traffic to look for other assets that receive the same kind of traffic, helping to understand what happened in your network. The zero-trust and visibility operations are incredible features, and I think it is the best way to use that.

Illumio Segmentation is deployed in my organization in a hybrid cloud environment, and I have another customer who operates totally in the cloud. The product fits very well in both cases, as it is very strong in that aspect. I can say it is the best solution on the cloud because it is the only one that really has features from Oracle, making it adaptable in all environments.

Illumio Segmentation has had a positive impact on my organization, as it has created a very impressive impact because it is a worldwide operation. Even though they deployed it only in Brazil, they are already looking to expand to other countries because of the results. They are achieving amazing results, specifically because on the OT side, the features of Illumio Segmentation are very easy to deploy and have no impact on operation.

I have seen specific results since deploying Illumio Segmentation, such as better visibility and less risk, because nowadays they know what kind of traffic happens in the OT environment and have already blocked it. They are not sure what could happen because they blocked that. Now, they are able to understand what happens in networking without risks. I am talking about an operation where a failure can lead to a disaster, such as an explosion or electrical power crash. Last year in this company, there was a very high incidence involving damage to people, but nowadays they feel more confident that they can manage the risks in the operation.

In my opinion, the best features Illumio Segmentation offers are that it is not an inline solution; it is an application, allowing you to start and stop Illumio Segmentation, rebuilding everything without stopping the services on the operation or the environment. It is a transparent operation, and the zero-trust and monitoring features are incredible, making it a very easy solution that does not consume a strong fingerprint, resulting in less CPU and less memory.

I would appreciate if Illumio Segmentation's interface were better. It is good enough to manage the operation and get the visibility, but when looking for data regarding licenses and expansion management, not operational points, it could be improved.

I do not have anything more to add about the needed improvements at this point because I know they have made some changes in the last three to six months, and I have not had time to closely look at the details regarding those changes. I can speak about this in the next three months at least, once I have more details about the results.

I have been using Illumio Segmentation for around three years.

I want to add that Illumio Segmentation works at an application level, so the manager of the network is able to stop Illumio Segmentation. Of course, that is not a security risk because Illumio Segmentation sends alerts in this case. The main point is that the operation is working, and if you have any single point of failure, you are able to turn that off. Illumio Segmentation does not impact the operation unlike other vendors that have inline solutions; it is a service solution. Therefore, it is easy to manage the environments, specifically OT environments that have many restrictions, making it very useful for...

Regarding Illumio Segmentation's AI capabilities, I think we need to go inside another product from Illumio called Insight; it is not the segmentation. On the segmentation side, I can only say it is not a real AI solution, but they have some kind of intelligence to understand the networking, the traffic, and the visibility. However, for true AI capabilities, the solution leads to the Insight product, which identifies risks in networking correlated with global attacks; it is a feature from Illumio, but it requires an additional purchase.

I advise others looking into using Illumio Segmentation to plan before starting, since you need to understand the size of your deployment, especially if you are going into the cloud. Integration with the cloud is very easy, but if you do full integration, you are going to pay for all assets in the cloud. Be careful about what you intend to accomplish before you start so you do not get a surprise on the price. It is not an expensive product, but if you have too many assets and you do not account for the number of assets, you might be surprised, especially if you bundle it with endpoint solutions. I have given this review a rating of ten out of ten.