Illumio Community Hub

If an IP address is associated with both a managed and an unmanaged workload, and those workloads have the same labels, the unmanaged workload is NOT ignored. The workload would never be written out of policy, even if the managed workload stops heartbeating, since the unmanaged workload is always online/connected/available. Also, I believe that the map view will show traffic to/from the unmanaged workload even if a managed workload exists for the same IP.

Thank you for your reply , and in case we have differents labels how does illumio apply rules does it push only rules applied for managed workload or both ?

If the managed and unmanaged workloads for the same device have different labels then you will get a mixture of results.

The important thing to remember is that by default Illumio blocks everything. Then if you allow something, by means of any rule in any ruleset, then it is allowed.

So let's talked about unmanaged workloads. Any rule applied to the label used on the unmanaged workload will only effect other workloads ability to send to, or receive traffic from the IP associated to the unmanaged workload. Or stated in another way, this will not add rules to the actual workload in question.

Rules applied to the label used by the managed workload will also create rules on that workload.