Rapid ransomware containment - Illumio

Isolate one or more workloads based on traffic flows to a given port/protocol.

Pack

Illumio

Tasks

22

Inputs

• Port — Provide Port to be blocked.
• Protocol — Protocol of Port.
• allow_traffic — Do you want to search for traffic on this port before the incident to allow? (Yes or No)
• update_enforcement_mode — Do you want to update the enforcement mode?(Yes or No)

Commands used

• illumio-enforcement-boundary-create
• illumio-ip-lists-get
• illumio-object-provision
• illumio-rule-create
• illumio-ruleset-create
• illumio-service-binding-create
• illumio-traffic-analysis
• illumio-virtual-service-create
• illumio-workloads-list