What does the Visibility Only enforcement mode mean?

Visibility Only enforcement mode signifies that the Virtual Enforcement Node (VEN) is focused solely on gathering and reporting information about network traffic without applying any security controls or rules. In this mode, the VEN tracks and analyzes the flow of data across the network, allowing organizations to gain insights into application behavior and network interactions. This level of visibility can help in understanding traffic patterns and identifying potential security risks or compliance issues, but it does not actively prevent or block any traffic, which is crucial when assessing a network's security posture.

This approach is especially valuable for organizations that are in the initial stages of implementing security policies or those that want to evaluate their current traffic without immediate enforcement. By using the Visibility Only mode, teams can make informed decisions about which rules or policies should be created based on the observed traffic data before progressing to more restrictive enforcement modes.