Illumio Zero Trust Segmentation Foundations

Illumio Zero Trust Segmentation (ZTS) is a micro-segmentation solution that provides both discovery services and highly efficient segmentation enforcement using the firewalls and access control lists (ACLs) in the workloads themselves. Because it deduplicates network flow discovery, it requires only a lightweight agent, which provides you with a less expensive option. Once it activates segmentation enforcement, Illumio provides very simple visualizations with clear network topology views for ease of management and operations.

This on-demand lab provides a safe environment to evaluate the functionality of Illumio using Linux and Windows workloads. This is the best starting point for understanding the solution and how it can provide value to your organization. 

This Lab demonstrates how Illumio:

• Performs application dependency mapping (ADM).
• Utilizes a simple labeling strategy to form the ADMs.
• Includes "monitor" modes to test segmentation before activating it.
• Enablement of segmentation enforcement.
• Reports "out-of-policy" traffic flows (anomalies).

This lab consists of the following hardware and software: 

• Workloads (Production and Development)
  4 x Ubuntu - Web and Application (Flask)
  2 x Server 2022 - Postgresql 17
• Illumio - VEN ver 24
• Jumpbox 
  1 x MS Server 2022
• Domain Controler (AD/DS and DNS)
  1 x MS Server 2022
• File Server
  1 x MS Server 2022
• DC1 Client
  1 x MS Windows11
• Customer Client
  1 x MS Windows11
• Next-Generation Firewall
  3 x Palo Alto VM100
• Gateway Router
  1 x Vyos
• Internet Provider
  1 x Traffic Jam