Install Defender
Last Updated:
Dec 9, 2021
Current Version:
Table of Contents
-
- Getting started
- System requirements
- Prisma Cloud container images
- Onebox
- Kubernetes
- OpenShift
- VMware Tanzu Kubernetes Grid (TKG)
- Docker Swarm
- Amazon ECS
- DC/OS (Marathon/Mesos)
- Windows
- Defender types
-
- Install Defender
- Install a single Container Defender
- Install Container Defender in a cluster
- App Embedded Defender
- App Embedded Defender for Fargate
- VMWare Tanzu TAS (PCF) Defender
- Serverless Defender (auto-protect)
- Serverless Defender
- Serverless Defender as a Lambda layer
- Install a Host Defender
- Deploy Prisma Cloud Defender from the GCP Marketplace
- Decommission Defenders
-
- Rule ordering and pattern matching
- Disaster recovery
- Custom feeds
- Configuring Prisma Cloud’s proxy settings
- Custom certs for Console access
- Configure scanning
- User certificate validity period
- Enable HTTP access to Console
- Set different paths for Defender and Console (with DaemonSets)
- Authenticate to Console with certificates
- Customize terminal output
- Collections
- Tags
- Logon settings
- Reconfigure Prisma Cloud
- Subject Alternative Names
- Credentials store
-
- Logging into Prisma Cloud
- Integrate with Active Directory
- Integrate with OpenLDAP
- Integrate Prisma Cloud with Open ID Connect
- Integrate with Okta via SAML 2.0 federation
- Integrate Google G Suite via SAML 2.0 federation
- Integrate with Azure Active Directory via SAML 2.0 federation
- Integrate with PingFederate via SAML 2.0 federation
- Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services (ADFS) via SAML 2.0 federation
- Integrate Prisma Cloud with GitHub
- Integrate Prisma Cloud with OpenShift
- Non-default UPN suffixes
- Compute user roles
- Assign roles
- Use custom certificates for authorization
- Credentials store
-
- Vulnerability Explorer
- Vulnerability management rules
- Search CVEs
- Scan reports
- Customize image scanning
- Configure registry scans
-
- Registry scanning
- Scan images in Alibaba Cloud Container Registry
- Scan images on Amazon EC2 Container Registry (ECR)
- Scan images in Azure Container Registry (ACR)
- Scan images on Docker Registry v2 (including Docker Hub)
- Scan images on Google Container Registry
- Scan images on Harbor
- Scan the IBM Cloud Container Registry
- Scan images on Artifactory Docker Registry
- Scan images on OpenShift’s integrated Docker registry
- Trigger registry scans with webhooks
- Configure VM image scanning
- Configure code repository scanning
- Malware scanning
- Vulnerability risk tree
- Detect vulnerabilities in unpackaged software
- CVSS scoring
- Google Cloud Container Builder
- Windows container image scanning
- Serverless function scanning
- VMWare Tanzu blobstore scanning
-
- Configure an AWS Classic Load Balancer for ECS
- Configure Prisma Cloud to use Nginx Ingress Controller in Kubernetes
- Configure the load balancer type for AWS EKS
- Deploy Defenders outside an OpenShift Cluster
- Configure Prisma Cloud Console’s listening ports
- Provision tenant projects in OpenShift
- Configure Prisma Cloud to use Istio Ingress Gateway
- Disable automatic learning
- Performing a rolling upgrade of Defenders
- Debug data
