Can a PCE send an outgoing rule to an unmanaged workload?

A Policy Compute Engine (PCE) cannot send an outgoing rule to an unmanaged workload. Unmanaged workloads are those that are not being actively monitored or controlled by the Illumio system; they fall outside the purview of what the PCE can manage. The PCE is designed to enforce policies and communicate rules primarily to managed workloads which have agents installed and are registered within the Illumio environment.

Sending rules to unmanaged workloads would not be effective because there is no mechanism in place to ensure that these workloads are compliant with the rules set forth by the PCE. They are essentially invisible to the PCE, and without agents or integration, communication and enforcement play a critical role in maintaining the security posture of the workloads. This means that any policy that aims to enforce security would not reach any unmanaged entities, which effectively makes this scenario unfeasible. Thus, the inability of the PCE to interact meaningfully with unmanaged workloads supports the assertion that it cannot send outgoing rules to them.