Getting started

BMC AMI Enterprise Connector for Illumio is a z/OS resident application which interfaces with the Illumio Policy Compute Engine (PCE) running on a Linux platform. The Illumio PCE collects network data and computes a wide range of centralized network-security related policies that can be distributed to systems throughout an enterprise network for implementation.

EC for Illumio provides z/OS support for a subset of Illumio PCE computed policies.

From an Illumio PCE perspective, z/OS is configured as an unmanaged workload, meaning that there is no full function Virtual Enforcement Node (VEN) resident on the platform. EC for Illumio downloads PCE computed access control lists (ACLs) which define the permitted IP connectivity. Any connection not specifically permitted by the PCE is rejected.

IP layer connectivity on z/OS is controlled by the IBM Server Policy Agent. Amongst its capabilities, the Policy Agent supports IP filtering within its IPSEC component through filtering rules that can be extrapolated from the ACLs provided by the PCE.

To get started with EC for Illumio, see the following topics:


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*