What happens if only the destination is managed?

When only the destination is managed in an Illumio environment, the Policy Compute Engine (PCE) operates in a specific manner to ensure traffic is appropriately controlled. In this scenario, the PCE sends an outgoing rule to the managed workload. This means that the workload can receive traffic from the unmanaged sources, facilitating communication in accordance with the defined policies.

This approach helps maintain operational efficiency, as it allows the managed destination to accept traffic from non-managed sources while ensuring it adheres to the rules established in the policy. The outgoing rules serve as a means to specify and govern what types of communications can occur with the managed workload, thus providing a controlled environment for data flow.

In essence, managing only the destination is about ensuring that the managed workload can still interact with its environment without imposing unnecessary restrictions on incoming traffic, allowing for flexibility in operations while maintaining an overall security posture.