Freedom251 › Microsegmentation Software
Illumio Segmentation
What Illumio Segmentation is
Illumio Segmentation uses one policy engine to control lateral movement across cloud workloads, endpoints, and data centers. It maps connections in real time across cloud workloads, on-premises servers, containers, and endpoints without manual mapping. Policies use workload identity rather than IP addresses, following workloads as they move between environments. Teams can preview draft policies to see what they would block before enabling them. Coverage includes cloud and containers, endpoints, physical servers, virtual machines, IT/OT systems, and data centers, with AWS, Azure, GCP, and OCI named as cloud environments. The product supports Windows and Linux host enforcement through Windows Filtering Platform and iptables, respectively. Illumio says its data center agent runs in user space and does not require a maintenance window or reboot. Listed capabilities include policy authoring, enforcement, quarantine, Illumio Virtual Advisor, and integrations. The product is subscription-licensed per workload, offered as SaaS or on-premises, with cloud resources supported in SaaS deployment. Pricing is available on request; a 30-day trial is listed, and there is no free plan.
Who it suits
It is positioned for organizations with workloads across multiple clouds, on-premises data centers, and endpoints that need consistent segmentation policies.
What it does well
- Maps connections in real time without manual mapping.
- Policies follow workload identity across environments.
- Draft policies can be previewed before enablement.
- Includes policy authoring, enforcement, and quarantine.
What to know first
- No free plan.
- Pricing is available on request.
- Subscription license is priced per workload.
Limits
The product is licensed per workload on a subscription basis, with pricing provided on request. The listed trial lasts 30 days and there is no free plan.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Illumio Segmentation | Subscription-based license priced per workload; contact Illumio for pricing. · Standalone license · SaaS or on-premises · Cloud resources supported with SaaS deployment | On request |
As illumio.com lists them, read 8 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Illumio Segmentation website
- Contact Illumio for subscription pricing per workload
- Choose a SaaS or on-premises standalone license
- Select supported Windows or Linux enforcement environments
- Use the 30-day trial to evaluate the product
Verdict
Illumio Segmentation is aimed at organizations managing segmentation across varied workload environments, with identity-based policies and draft previews. Pricing is subscription-based per workload and requires contacting Illumio; a 30-day trial is listed.
Questions
What is Illumio Segmentation used for?
It uses one policy engine to stop lateral movement across cloud workloads, endpoints, and data centers.
Which platforms and environments are supported?
Supported platforms include API, Linux, self-hosted, web, and Windows. Coverage includes cloud and containers, endpoints, physical servers, virtual machines, IT/OT systems, and data centers.
Is there a free plan?
No. Illumio Segmentation is paid software, with a 30-day trial listed.
How is it priced?
The standalone license is subscription-based and priced per workload. Buyers must contact Illumio for pricing.
Which cloud providers are named?
The product page names AWS, Azure, GCP, and OCI cloud environments.
Facts from Illumio Segmentation's own pages
- Agent architecture
- Illumio says its data center agent runs in user space rather than kernel space and does not require a maintenance window or reboot. · illumio.com, 8 Oct 2026
- Application rules
- Yes · illumio.com, 22 Sept 2026
- Central management
- Yes · illumio.com, 22 Sept 2026
- Cloud providers
- The product page names AWS, Azure, GCP, and OCI cloud environments. · illumio.com, 8 Oct 2026
- Connection alerts
- Yes · illumio.com, 22 Sept 2026
- Coverage
- The product covers cloud and containers, endpoints, and data centers, including physical servers, virtual machines, IT/OT systems, and containers. · illumio.com, 8 Oct 2026
- Founded
- 2013 · illumio.com, 23 Sept 2026
- Free plan
- No · illumio.com, 22 Sept 2026
- Headquarters
- Sunnyvale, California, United States · illumio.com, 23 Sept 2026
- Identity-based policy
- Policies use workload identity rather than IP addresses and follow workloads as they move between environments. · illumio.com, 8 Oct 2026
- Included capabilities
- The licensing guide lists policy authoring, enforcement, quarantine, Illumio Virtual Advisor, and integrations as included capabilities. · product-docs-repo.illumio.com, 8 Oct 2026
- Integrations
- Illumio documents integrations including Ansible, Wiz, ServiceNow, Check Point, Fortinet, Palo Alto Networks, Splunk, QRadar, Sentinel, Armis, and Claroty. · product-docs-repo.illumio.com, 8 Oct 2026
- Intended audience
- Illumio positions the product for organizations with workloads across multiple clouds, on-premises data centers, and endpoints that need consistent segmentation policies. · illumio.com, 8 Oct 2026
- Outbound control
- advanced · illumio.com, 22 Sept 2026
- Supported platforms
- windows,linux · illumio.com, 22 Sept 2026
- Policy preview
- Users can model a policy in draft view to see what it would block before enabling it. · illumio.com, 8 Oct 2026
- Purpose
- Illumio Segmentation uses one policy engine to stop lateral movement across cloud workloads, endpoints, and data centers. · illumio.com, 8 Oct 2026
- Rule direction
- both · illumio.com, 22 Sept 2026
- Security and compliance
- Illumio's certifications page describes SOC 2 Type 2, FIPS 140-2, FedRAMP Moderate for Illumio Government Cloud, Section 508, and NIAP Common Criteria for Illumio Core. · illumio.com, 8 Oct 2026
- Support
- Illumio offers customer success advisors as a main non-technical point of contact and publishes regional support phone numbers. · illumio.com, 8 Oct 2026
- Supported enforcement mechanisms
- The product FAQ describes host operating system enforcement through Windows Filtering Platform on Windows and iptables on Linux. · illumio.com, 8 Oct 2026
- Traffic visibility
- It maps connections across cloud workloads, on-premises servers, containers, and endpoints in real time without manual mapping. · illumio.com, 8 Oct 2026
Where Illumio Segmentation stands on Freedom251
- Microsegmentation Software#14 of 31
- Application Dependency Mapping Software#20 of 42
- Zero Trust Architecture Software#13 of 19
- Firewall Software#64 of 81