Can a PCE send rules to an unmanaged workload?

The correct answer indicates that a Policy Compute Engine (PCE) cannot send rules to an unmanaged workload. This is an essential aspect of Illumio's architecture. Unmanaged workloads are those that are not connected to or monitored by Illumio and, therefore, do not receive policy updates or enforcement from the PCE.

Since the PCE relies on having visibility and control over workloads to apply security rules and policies effectively, unmanaged workloads, which are outside of this control framework, cannot be configured or influenced by the PCE. This ensures that the rules are only applied to workloads that are actively being monitored, allowing for real-time updates and policy enforcement that are integral to the functionality of the Illumio platform.

Understanding this limitation is crucial for effective security policy management in environments using Illumio, as it emphasizes the importance of managing all relevant workloads to maintain a secure posture.