1. Home
    2. Prisma
    3. Prisma Cloud
    4. Prisma Cloud Compute Edition Administrator’s Guide
    5. Tools
    6. Update the Intelligence Stream in offline environments
    End-of-Life (EoL)

    Update the Intelligence Stream in offline environments

    Prisma Cloud provides a method to update Console’s vulnerability and threat data even if it runs in an offline environment.
    The Prisma Cloud Intelligence Stream (IS) is a real-time feed that contains vulnerability data and threat intelligence from commercial providers, Prisma Cloud Labs, and the open source community.
    When you install Prisma Cloud, Console is automatically configured to connect to intelligence.twistlock.com to download updates. The IS is updated several times per day. Each time the IS is updated, Console immediately downloads the new data.
    If you run Prisma Cloud in an offline environment, where Console does not have access to the Internet to download updates from the IS, then you can manually download and install IS updates.

    Downloading updates from the IS

    Before starting, ensure the Internet-connected host to where you will initially download the updates can access the Intelligence Stream. The most reliable way to test connectivity is to ping the Intelligence Stream. This following curl command verifies that name resolution and any intermediary HTTP proxies are functioning properly.
    $ curl -k \
  --silent \
  --output /dev/null \
  --write-out "%{http_code}\n" \
  https://intelligence.twistlock.com/api/v1/_ping
    If you’ve got connectivity, you’ll get back a 200 (Successful) response code.
    200
    1. Open Console.
    2. Go to
      Manage > System > Intelligence
      .
    3. Copy the access token.
    4. Download the data in the Intelligence Stream.
      1. Open a shell window
      2. Go to the directory where you unpacked the Prisma Cloud release tarball.
      3. Run the following command, using the access token you downloaded.
        $ ./linux/twistcli intelligence download --token <TWISTLOCK-ACCESS-TOKEN>
        The script downloads all the feeds and generates an archive named twistlock_feed_<random_string>.tar.gz

    Uploading IS updates to Console

    Use the twistcli tool to upload the intelligence stream archive to your Prisma Cloud Console.
    1. Connect to the host machine running Console.
    2. Open a shell window.
    3. Go to the directory where you unpacked the Prisma Cloud release tarball.
    4. Run the following command:
      $ ./linux/twistcli intelligence upload \
  --address <COMPUTE_CONSOLE> \
  --user <USER> \
  --password <PASSWORD> \
  --tlscacert <PATH-TO-CERT> \
  <TWISTLOCK-FEED-ARCHIVE>
      Where:

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2023 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo