What does it mean when a VEN is in a suspended state?

When a VEN (Vulnerability Enforcement Node) is in a suspended state, it indicates that all Illumio-related processes are shut down and IP table rules are removed. This state suggests that the node is effectively taken offline in terms of its functionality with Illumio, meaning that it no longer enforces security policies or communicates with the Illumio Control Plane.

In this state, the VEN will not actively participate in monitoring or enforcement of security measures, and its ability to enforce traffic segmentation is paused. This is different from a fully deactivated state, where the node may be entirely turned off, or a maintenance state, which might imply that functionality is still partially available or not completely shut down.

The node's capability to receive updates is also not applicable during the suspended state, as the processes are not running that would handle such updates. Therefore, the characteristics of a suspended state are specifically tied to the cessation of all operational activities associated with Illumio.