Previous Release Notes For 2024

The Applications page now lets you export reports.

See View and Approve an Application.

The Connector page automation feature for Slack now allows you to test the new trigger rule before saving.

See Connector.

These resources are now visible on the Inventory page:

• Azure Batch Account

See Inventory Supported Resources.

The Application Definitions tab now lets you export reports.

See Define an Application Automatically.

CloudSecure now retains system events for 30 days.

See Events.

The Illumio Virtual Advisor (IVA) is an AI chatbot that helps organizations understand and reduce their risk posture by using natural language questions to generate quick answers and actions.

See About the Illumio Virtual Advisor.

These resources are now visible on the Inventory page:

• AWS VPN Connection

• Azure Virtual Hub IP Configuration

See Inventory Supported Resources.

The Traffic page now supports:

• Linking directly to the Reports page to download a traffic list report as soon as you create it

• Filtering by known networks

See Reports, Traffic and Search Traffic.

The Events page now lets you export system event reports.

See Events.

These AWS resources are now visible on the Cloud Map page:

• DocumentDB DB Cluster

• DocumentDB Instance

See Cloud Map Supported Resources.

The Insights page now includes 24 insight tiles, so you can use out-of-the-box queries to gain quick insights into resources within minutes of onboarding them:

• Cross Cloud Traffic
• Cross Region Traffic
• Cross Tenant Traffic
• Cross Tenant Traffic
• Account to Malicious External IP Traffic
• Account to Unknown External IP Traffic
• Account to Known External IP Traffic
• Tenant to Malicious External IP Traffic
• Tenant to Unknown External IP Traffic
• Tenant to Known External IP Traffic
• Region to Malicious External IP Traffic
• Region to Unknown External IP Traffic
• Region to Known External IP Traffic
• Azure Tenant to AWS IP Traffic
• Account to External Cloud Traffic
• Tenant to External Cloud Traffic
• Region to External Cloud Traffic
• Account to External Geo Traffic
• Tenant to External Geo Traffic
• Region to External Geo Traffic
• Cross Talking Peering Connections
• Internet Exposed EC2 Instances
• Unprotected Resources
• Traffic Blind Spots

See Insights.

The Insights page now provides descriptions when you hover over the insight tiles.

See Insights.

These Azure resources are now visible on the Inventory page:

• Virtual Hub

• Virtual Hub Connection

See Inventory Supported Resources.

The Inventory page now lets you export reports.

See Inventory.

The Reports page now lets you edit reports.

See Reports.

The Traffic and Cloud Map pages now lets you filter IP addresses by CIDR blocks.

See Search Traffic and Cloud Map.

CloudSecure now removes flow information more than 90 days old.

See Traffic.

The Traffic page now lets you refresh your filter results to clear stale data without refreshing the browser page.

See Search Traffic.

The Usage page now has updated terminology for the data displayed

See Product Usage.

CloudSecure now has an Application Summary tab in the application details panel.

See View and Approve an Application.

CloudSecure now has a Service Accounts page for adding and deleting service accounts and their secrets.

See Service Accounts.

This Azure resource is now visible on the Map page:

• Redis Cache

See Cloud Map Supported Resources.

These Azure resources are now visible on the Inventory page:

• Virtual Network Gateway
• Virtual Network Gateway connection

See Inventory Supported Resources.

The Events page now performs cleanup after events become seven days old.

See Events.

The Reports page now lets you delete reports in bulk.

See Reports.

The Show Impact filter now lets you filter by network access control lists.

See Writing Application Policy.

These AWS resources are now visible on the Inventory page:

• Transit Gateway

• Transit Gateway Attachment

• Transit Gateway Route Table

• Transit Gateway Multicast Domain

• DocumentDB Cluster

• DocumentDB Instance

• Document DB Elastic Cluster

• VPC Endpoint Service

See Inventory Supported Resources.

Role-based access control (RBAC) is now available.

See Role-Based Access Control.

The Traffic and Application Traffic basic filter has been replaced by the advanced filter.

See Search Traffic.

The Traffic page now has an export option.

See Traffic.

These Azure resources are now visible on the Inventory page:

• Firewall Policy

• Rule Collection Group

• Diagnostic Setting

See Inventory Supported Resources.

The Reports page now lets you generate Risk reports. It also now lets you delete reports.

See Reports.

The Events page now has a System Events Tab, which lets you view system-generated events.

See Events.

The Reports page gives you the ability to generate event audit reports asynchronously. You can then download and share the reports.

See Reports.

CloudSecure's Inventory page provides the following new resource properties for the AWS resources listed:

• Security Group Rule: The properties for his resource now also provide a table of security group rules.

• ElasticLoadBalancingV2 Load Balancer: The properties for this resource now also provide schemes.

• RAM Resource Share: The properties for this resource now also provide resource owner ID and resource type.

• Route Table: The properties for this resource now also provide a list of associated rules.

• VPC Peering: The name and ID for this resource now appear as a hoverable resource tile instead of static text.

• Shared VPC and Shared Subnets: The properties for this resource now also provide owner IDs and shared status.

• All resources: The properties for all resources now also provide resource group information if it exists.

See Inventory Supported Resources.

CloudSecure's Inventory page provides the following new information or presentation:

• Route table relationships

• Category and region information in attached resource tables

• Resource names and IDs now appear as a hoverable resource tile instead of static text

• Account IDs now appear as a hoverable resource tile instead of static text

See Inventory Supported Resources.

These Azure resources are now visible on the Inventory page:

• Redis Cache

• Private Links

See Inventory Supported Resources.

The Inventory, Application Inventory, and Cloud Map filters now let you search for resource groups and resource names.

See CloudSecure Search.

You can now manually add permissions to the CloudSecure role so that it can fetch flow logs that you may have stored in custom S3 bucket directories.

See Manually Configure CloudSecure to Fetch Flow Logs.

The advanced traffic filter now also appears on the Applications page Traffic tab. Use it to search traffic to and from the selected application.

See Search Traffic.

With Illumio CloudSecure Insights, you can use out-of-the-box queries to gain quick insights into resources within minutes of onboarding them, including:

• Networks where flows logs are not enabled

• EC2 instances that are directly reachable from the Internet

• Cross-account, cross-region communications enabled with peered network connections

CloudSecure now lets you filter Flow Log Access tables in the following places:

• Flow Log Access page

• Flow Log Access Details By Log Destination Account tab

• Flow Log Access Details By Log Source Account tab

See Grant Flow Log Access.

• CloudSecure now lets you add additional search terms without having to delete existing terms in the Traffic page Advanced Filter.

See Search Traffic.

• This resource now appears on the Inventory Details page as an attached resource for VPCs and subnets:

  • AWS:

    • RAM ResourceShare

See Inventory Supported Resources.

• CloudSecure now lets you write single allow rules for multiple ports for AWS security groups so long as there is no deny rule prohibiting the allow rule.

• CloudSecure now lets you create a single rule for multiple IPs if they belong to a CIDR.

• Policies now let you select 'All Resources' instead of 'All Workloads.'

See Writing Application Policy.

Illumio now lets you achieve unified visibility with the Map:

• You can view the traffic between resources

• You can right-click on a resource to write policy

• You can distinguish between AWS, Azure, and server datacenter types

• You can view the cloud metadata in search filters like Account ID, Region, Resource Type, and more

See Map.

Policy can now be authored and enforced for all datacenters and cloud workloads. Illumio allows or denies traffic between applications using policies that you write. In order to write application policies, you must create rules for the policy.

See Unified Policy.

The Illumio Virtual Advisor (IVA) is an AI chatbot that helps organizations understand and reduce their risk posture by using natural language questions to generate quick answers and actions.

See About the Illumio Virtual Advisor.

• Use AI labeling to label assets based on metadata and flow logs to make sure you have accurate and consistent labeling. This method speeds up deployments and ensures consistent enforcement.

See Use AI Labeling.

• Rule-based labeling allows you to assign labels to one or more workloads when their attributes match conditions that you specify in easily-configurable rules. You can perform the following tasks with this feature:

  • You can create a basic rule to match workloads running on a specific operating system

  • You can create a rule with multiple values to match workloads with a hostname containing any of the entered values (up to 20)

  • You can create an IP Address rule to match workloads within an IP address range

  • You can create a CIDR block rule to match workloads within a CIDR block

See Rule-Based Labeling.

CloudSecure now gives destination-based view to grant flow log access. The new view provides a list of flow log destinations that are used for storing flow logs on a per-account basis. You can also see a list of log sources sent from different accounts. For centralized flow logs, you can now grant access to the log archive account's destination so that CloudSecure can read and process the logs. See Grant Flow Log Access.

This resource is now visible on the Inventory page:

AWS:

• RAM ResourceShare

See Inventory Supported Resources.

CloudSecure now lets you access Azure VNet flow logs. See Grant Flow Log Access.

Organization policies now let you select 'All Workloads' that allow you to write organization policies for all resources in onboarded cloud accounts. See Writing Application Policy.

The Dashboard now lets you ingested resources at a glance. See CloudSecure Dashboard.

The Label Mapping page now lets you view a list of the following system-generated labels at a glance:

• ServiceCategory describes resources by their categories
• ServiceRole describes resources according to their roles

See View System Labels.

The Traffic page now lets you view traffic flow source and destination details. See Traffic.

The Inventory page now has a Service Category filter for searching your inventory of resources. See CloudSecure Search.

You can now use the following system-generated labels:

• ServiceCategory describes resources by their categories
• ServiceRole describes resources according to their roles

See Labels.

The Traffic page Beta Advanced Filter now lets you search by VPC, subnet, and resource type. See Search Traffic.

The following resources now support policy:

• AWS:
  • Redshift Clusters
  • RDS DB Instances
  • ElastiCache CacheClusters
  • Lambda Functions
• Azure:
  • Virtual Machine ScaleSets

See Resources that Support Policy.  

The following resources now support policy:

• AWS:
  • ElasticLoadBalancingV2 Load Balancer
• Azure:
  • SQL Server

See Resources that Support Policy.

• The Usage page now lets you select a custom time range, going back to day zero. See Product Usage.

• The Audit Events page now shows up to 10,000 results. See Events.

• Cloud, Region, and Account are now available as filterable categories in the Traffic page Beta Advanced Filter mode. See Traffic.
• This resource is now visible on the Inventory page, and appears on the Cloud Map page as an attached resource for EC2 Instances and ElasticLoadBalancingV2 Load Balancers:
  • AWS:
    • ElasticLoadBalancingV2 Target Group

See Inventory Supported Resources and Cloud Map Supported Resources.

You can now edit your deployments. See Define a Deployment.

• The Audit Events page shows you a running list of different events in your environment such as onboarding, policy, labeling and user actions. See Events for information.
• The Inventory page is no longer limited in the number of resources it can display. See Inventory for information.

You can now bulk-delete applications that were created using Application Discovery Rules. See Define an Application Automatically for information.