Prisma Cloud Compute Edition Administrator’s Guide
Version Self.Hosted 19.11 (EoL)
Last Updated:
Dec 9, 2021
Current Version:
Self.Hosted 19.11 (EoL)
- Version Prisma Cloud Enterprise Edition
- Version Self-Hosted 22.12
- Version Self-Hosted 22.06
- Version Self-Hosted 22.01
- Version Self-Hosted 21.08 (EoL)
- Version Self-Hosted 21.04 (EoL)
- Version Self-Hosted 20.12 (EoL)
- Version Self-Hosted 20.09 (EoL)
- Version Self-Hosted 20.04 (EoL)
- Version Self-Hosted 19.11 (EoL)
Table of Contents
-
- Rule ordering and pattern matching
- Disaster recovery
- Custom feeds
- Configuring Prisma Cloud’s proxy settings
- Custom certs for Console access
- Configure scanning
- User certificate validity period
- Manage Prisma Cloud with systemd
- Disable HTTP access to Console
- Set different paths for Defender and Console (with DaemonSets)
- Authenticate to Console with certificates
- Customize terminal output
- Collections
- High availability
- Logon settings
- Reconfigure Prisma Cloud
- Subject Alternative Names
- Credentials store
-
- Vulnerability Explorer
- Vulnerability management rules
- Search CVEs
- Scan reports
- Customize image scanning
- Configure registry scans
-
- Registry scanning
- Scan images in Alibaba Cloud Container Registry
- Scan images on Amazon EC2 Container Registry (ECR)
- Scan images in Azure Container Registry (ACR)
- Scan images on Docker Hub
- Scan images on Google Container Registry
- Scan the IBM Cloud Container Registry
- Scan images on Artifactory Docker Registry
- Scan images on OpenShift’s integrated Docker registry
- Trigger registry scans with webhooks
- Malware scanning
- Zero-day vulnerabilities
- Vulnerability risk tree
- Detect vulnerabilities in unpackaged software
- CVSS scoring
- Google Cloud Container Builder
- Windows container image scanning
- Serverless function scanning
- Pivotal Cloud Foundry blobstore scanning
-
- Access keys
- Role-based access control for Docker Engine
- Integrate with Active Directory
- Integrate with OpenLDAP
- Integrate with SAML
- Integrate Google G Suite (SAML)
- Integrate with Azure Active Directory via SAML 2.0 Federation
- Integrate with PingFederate via SAML 2.0 Federation
- Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services via SAML 2.0 Federation
- Non-default UPN suffixes
- User roles
- Assign roles
- Use custom certificates for authorization
-
- Runtime defense
- Runtime defense for processes
- Runtime defense for networking
- Runtime defense for file systems
- Runtime defense for system calls
- Runtime defense for hosts
- Custom runtime rules
- Blocked containers
- Import and export individual rules
- Discrete blocking
- Runtime defense for AWS Fargate
- Incident Explorer
-
- Configure an AWS Network Load Balancer
- Configure Prisma Cloud to use Nginx Ingress Controller in Kubernetes
- Configure the load balancer type for AWS EKS
- Deploy Defenders outside an OpenShift Cluster
- Configure Prisma Cloud Console’s listening ports
- Integrate Prisma Cloud scanning into the OpenShift build process
- Provision tenant projects in OpenShift
- Configure Prisma Cloud to use Istio Ingress Gateway
- Multi-AZ high availability
- Disable automatic learning
- Performing a rolling upgrade of Defenders
