Install Defender
Last Updated:
Dec 9, 2021
Current Version:
Self.Hosted 20.04 (EoL)
- Version Prisma Cloud Enterprise Edition
- Version Self-Hosted 22.12
- Version Self-Hosted 22.06
- Version Self-Hosted 22.01
- Version Self-Hosted 21.08 (EoL)
- Version Self-Hosted 21.04 (EoL)
- Version Self-Hosted 20.12 (EoL)
- Version Self-Hosted 20.09 (EoL)
- Version Self-Hosted 20.04 (EoL)
- Version Self-Hosted 19.11 (EoL)
Table of Contents
-
- Getting started
- System requirements
- Prisma Cloud container images
- Onebox
- Kubernetes
- OpenShift
- VMware Tanzu Enterprise PKS
- Docker Swarm
- Amazon ECS
- DC/OS (Marathon/Mesos)
- Windows
- Defender types
-
- Install Defender
- Install a single Container Defender
- Install Container Defender in a cluster
- App Embedded Defender
- App Embedded Defender for Fargate
- App Embedded Defender for Pivotal PAS apps
- Serverless Defender (auto-protect)
- Serverless Defender
- Serverless Defender as a Lambda layer
- Decommission Defenders
-
- Rule ordering and pattern matching
- Disaster recovery
- Custom feeds
- Configuring Prisma Cloud’s proxy settings
- Custom certs for Console access
- Configure scanning
- User certificate validity period
- Manage Prisma Cloud with systemd
- Enable HTTP access to Console
- Set different paths for Defender and Console (with DaemonSets)
- Authenticate to Console with certificates
- Customize terminal output
- Collections
- Tags
- High availability
- Logon settings
- Reconfigure Prisma Cloud
- Subject Alternative Names
- Credentials store
-
- Vulnerability Explorer
- Vulnerability management rules
- Search CVEs
- Scan reports
- Customize image scanning
- Configure registry scans
-
- Registry scanning
- Scan images in Alibaba Cloud Container Registry
- Scan images on Amazon EC2 Container Registry (ECR)
- Scan images in Azure Container Registry (ACR)
- Scan images on Docker Registry v2 (including Docker Hub)
- Scan images on Google Container Registry
- Scan images on Harbor
- Scan the IBM Cloud Container Registry
- Scan images on Artifactory Docker Registry
- Scan images on OpenShift’s integrated Docker registry
- Trigger registry scans with webhooks
- Configure VM image scanning
- Malware scanning
- Zero-day vulnerabilities
- Vulnerability risk tree
- Detect vulnerabilities in unpackaged software
- CVSS scoring
- Google Cloud Container Builder
- Windows container image scanning
- Serverless function scanning
- Pivotal Cloud Foundry blobstore scanning
-
- Role-based access control for Docker Engine
- Integrate with Active Directory
- Integrate with OpenLDAP
- Integrate with SAML
- Integrate Google G Suite (SAML)
- Integrate with Azure Active Directory via SAML 2.0 Federation
- Integrate with PingFederate via SAML 2.0 Federation
- Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services via SAML 2.0 Federation
- Non-default UPN suffixes
- Compute user roles
- Assign roles
- Use custom certificates for authorization
- Admission control with Open Policy Agent
-
- Configure an AWS Classic Load Balancer for ECS
- Configure Prisma Cloud to use Nginx Ingress Controller in Kubernetes
- Configure the load balancer type for AWS EKS
- Deploy Defenders outside an OpenShift Cluster
- Configure Prisma Cloud Console’s listening ports
- Provision tenant projects in OpenShift
- Configure Prisma Cloud to use Istio Ingress Gateway
- Multi-AZ high availability
- Disable automatic learning
- Performing a rolling upgrade of Defenders
