the example</a><li role=none aria-label="See also"><a href=#see-also>See also</a></li></ol><hr></div></nav><p>This task shows how to ensure your workloads only communicate using mutual TLS as they are migrated to
Istio.</p><p>Istio automatically configures workload sidecars to use <a href=/v1.13/docs/tasks/security/authentication/authn-policy/#auto-mutual-tls>mutual TLS</a> when calling other workloads. By default, Istio configures the destination workloads using <code>PERMISSIVE</code> mode.
When <code>PER