Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
Prisma
Prisma Cloud
Prisma Cloud Compute Edition Administrator’s Guide

Last Updated:

Thu Dec 09 14:09:11 PST 2021

Current Version:

Self.Hosted 19.11 (EoL)

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 22.01
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

End-of-Life (EoL)

Table of Contents

Search the Table of Contents

Welcome

Getting started

Product architecture

Releases

Support lifecycle

Licensing

Prisma Cloud Enterprise Edition vs Compute Edition

Utilities and plugins

Debug data

Install

Getting started

System requirements

Prisma Cloud container images

Onebox

Kubernetes

OpenShift

Pivotal Container Service

Docker Swarm

Amazon ECS

DC/OS (Marathon/Mesos)

Windows

Defender types

Install Defender

Install Defender

Install a single Container Defender

Install Container Defender in a cluster

RASP Defender

RASP Defender for Fargate

RASP Defender for Pivotal PAS apps

Serverless Defender

Serverless Defender as a Lambda layer

Decommission Defenders

Upgrade

Upgrade Prisma Cloud

Upgrade Onebox

Kubernetes

OpenShift

Helm charts

Docker Swarm

Amazon ECS

Upgrade single Container Defenders

Upgrade DaemonSet Defenders

Technology overviews

Prisma Cloud Advanced Threat Protection

App-specific network intelligence

Radar

Serverless Radar

Prisma Cloud Rules Guide - Docker

Defender architecture

Telemetry

Configure

Rule ordering and pattern matching

Disaster recovery

Custom feeds

Configuring Prisma Cloud’s proxy settings

Custom certs for Console access

Configure scanning

User certificate validity period

Manage Prisma Cloud with systemd

Disable HTTP access to Console

Set different paths for Defender and Console (with DaemonSets)

Authenticate to Console with certificates

Customize terminal output

Collections

High availability

Logon settings

Reconfigure Prisma Cloud

Subject Alternative Names

Credentials store

Vulnerability management

Vulnerability Explorer

Vulnerability management rules

Search CVEs

Scan reports

Customize image scanning

Configure registry scans

Registry scanning

Registry scanning

Scan images in Alibaba Cloud Container Registry

Scan images on Amazon EC2 Container Registry (ECR)

Scan images in Azure Container Registry (ACR)

Scan images on Docker Hub

Scan images on Google Container Registry

Scan the IBM Cloud Container Registry

Scan images on Artifactory Docker Registry

Scan images on OpenShift’s integrated Docker registry

Trigger registry scans with webhooks

Malware scanning

Zero-day vulnerabilities

Vulnerability risk tree

Detect vulnerabilities in unpackaged software

CVSS scoring

Google Cloud Container Builder

Windows container image scanning

Serverless function scanning

Pivotal Cloud Foundry blobstore scanning

Access control

Access keys

Role-based access control for Docker Engine

Integrate with Active Directory

Integrate with OpenLDAP

Integrate with SAML

Integrate Google G Suite (SAML)

Integrate with Azure Active Directory via SAML 2.0 Federation

Integrate with PingFederate via SAML 2.0 Federation

Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services via SAML 2.0 Federation

Non-default UPN suffixes

User roles

Assign roles

Use custom certificates for authorization

Compliance

Compliance Explorer

Manage compliance

CIS Benchmarks

Prisma Cloud Labs compliance checks

Serverless functions compliance checks

Windows compliance checks

Custom compliance checks

Extensible compliance checks

Trusted images

Host scanning

Detect secrets

Cloud discovery

Runtime defense

Runtime defense

Runtime defense for processes

Runtime defense for networking

Runtime defense for file systems

Runtime defense for system calls

Runtime defense for hosts

Custom runtime rules

Blocked containers

Import and export individual rules

Discrete blocking

Runtime defense for AWS Fargate

Incident Explorer

Incident types

Incident types

Backdoor admin accounts

Backdoor SSH access

Brute force

Crypto miners

Data exfiltration

Hijacked processes

Kubernetes attacks

Lateral movement

Port scanning

Service violation

Weak settings

Continuous integration

Jenkins plugin

Jenkins Freestyle project

Jenkins Maven project

Jenkins Pipeline project

Run Jenkins in a container

Jenkins pipeline on Kubernetes

CloudBees Core pipeline on Kubernetes

CI plugin policy

Firewalls

Cloud Native Application Firewall (CNAF)

Deploying CNAF

Cloud Native Network Firewall (CNNF)

CNNF for hosts

Secrets

Secrets manager

Integrate with secrets stores

Secrets Stores

Secrets Stores

AWS Secrets Manager

AWS Systems Manager Parameters Store

Azure Key Vault

CyberArk Enterprise Password Vault

HashiCorp Vault

Inject secrets into containers

Injecting secrets: end-to-end example

Alerts

Alert mechanism

AWS Security Hub

Email alerts

Google Cloud Pub/Sub

Google Cloud Security Command Center

IBM Cloud Security Advisor

JIRA Alerts

PagerDuty alerts

Slack Alerts

Webhook alerts

Audit

Event viewer

Host activity

Administrative activity audit trail

Annotate audit event records

Delete audit logs

Syslog and stdout integration

Log rotation

Throttling audits

Prometheus

Kubernetes auditing

Tools

twistcli

Scan images with twistcli

Install Console with twistcli

Update the Intelligence Stream in offline environments

Deployment patterns

Projects

Best practices for DNS and certificate management

Performance planning

API

Access the API

Set up a fresh Console

Automate Defender install

Manage compliance policies with the API

19.11 porting guide

Howto

Configure an AWS Network Load Balancer

Configure Prisma Cloud to use Nginx Ingress Controller in Kubernetes

Configure the load balancer type for AWS EKS

Deploy Defenders outside an OpenShift Cluster

Configure Prisma Cloud Console’s listening ports

Integrate Prisma Cloud scanning into the OpenShift build process

Provision tenant projects in OpenShift

Configure Prisma Cloud to use Istio Ingress Gateway

Multi-AZ high availability

Disable automatic learning

Performing a rolling upgrade of Defenders

Welcome
Install
Upgrade
Technology overviews
Configure
Vulnerability management
Access control
Compliance
Runtime defense
Continuous integration
Firewalls
Secrets
Alerts
Audit
Tools
Deployment patterns
API
Howto

Prisma Cloud Compute Edition Administrator’s Guide

Version Self.Hosted 19.11 (EoL)

PDF Cover Image

Last Updated:

Thu Dec 09 14:09:11 PST 2021

Current Version:

Self.Hosted 19.11 (EoL)

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 22.01
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

End-of-Life (EoL)

© 2022 Palo Alto Networks, Inc. All rights reserved.