Deployment patterns
Last Updated:
Thu Dec 09 22:12:31 UTC 2021
Current Version:
Self.Hosted 20.12 (EoL)
- Version Prisma Cloud Enterprise Edition
- Version Self-Hosted 30.xx
- Version Self-Hosted 22.12
- Version Self-Hosted 22.06
- Version Self-Hosted 22.01
- Version Self-Hosted 21.08 (EoL)
- Version Self-Hosted 21.04 (EoL)
- Version Self-Hosted 20.12 (EoL)
- Version Self-Hosted 20.09 (EoL)
- Version Self-Hosted 20.04 (EoL)
- Version Self-Hosted 19.11 (EoL)
Table of Contents
-
- Getting started
- System requirements
- Prisma Cloud container images
- Onebox
- Kubernetes
- OpenShift
- OpenShift
- VMware Tanzu Kubernetes Grid (TKG)
- Docker Swarm
- Amazon ECS
- Windows
- Defender types
-
- Install Defender
- Install a single Container Defender
- Install Container Defender in a cluster
- App Embedded Defender
- App Embedded Defender for Fargate
- VMware Tanzu Application Service (TAS) Defender
- Serverless Defender (auto-protect)
- Serverless Defender
- Serverless Defender as a Lambda layer
- Install a Host Defender
- Deploy Prisma Cloud Defender from the GCP Marketplace
- Decommission Defenders
-
- Rule ordering and pattern matching
- Disaster recovery
- Custom feeds
- Configuring Prisma Cloud’s proxy settings
- Custom certs for Console access
- Configure scanning
- User certificate validity period
- Enable HTTP access to Console
- Set different paths for Defender and Console (with DaemonSets)
- Authenticate to Console with certificates
- Customize terminal output
- Collections
- Tags
- Logon settings
- Reconfigure Prisma Cloud
- Subject Alternative Names
-
- Logging into Prisma Cloud
- Integrate with Active Directory
- Integrate with OpenLDAP
- Integrate Prisma Cloud with Open ID Connect
- Integrate with Okta via SAML 2.0 federation
- Integrate Google G Suite via SAML 2.0 federation
- Integrate with Azure Active Directory via SAML 2.0 federation
- Integrate with PingFederate via SAML 2.0 federation
- Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services (ADFS) via SAML 2.0 federation
- Integrate Prisma Cloud with GitHub
- Integrate Prisma Cloud with OpenShift
- Non-default UPN suffixes
- Compute user roles
- Assign roles
- Use custom certificates for authorization
- Credentials store
-
- Vulnerability Explorer
- Vulnerability management rules
- Search CVEs
- Scan reports
- Customize image scanning
- Configure registry scans
-
- Registry scanning
- Scan images in Alibaba Cloud Container Registry
- Scan images on Amazon EC2 Container Registry (ECR)
- Scan images in Azure Container Registry (ACR)
- Scan images on Docker Registry v2 (including Docker Hub)
- Scan images on Google Container Registry
- Harbor
- Scan the IBM Cloud Container Registry
- Scan images on Artifactory Docker Registry
- Scan images on OpenShift’s integrated Docker registry
- Trigger registry scans with webhooks
- Base images
- Configure VM image scanning
- Configure code repository scanning
- Malware scanning
- Vulnerability risk tree
- Detect vulnerabilities in unpackaged software
- CVSS scoring
- Google Cloud Container Builder
- Windows container image scanning
- Serverless function scanning
- VMware Tanzu blobstore scanning
-
- Configure an AWS Classic Load Balancer for ECS
- Configure Prisma Cloud to use Nginx Ingress Controller in Kubernetes
- Configure the load balancer type for AWS EKS
- Deploy Defenders outside an OpenShift Cluster
- Configure Prisma Cloud Console’s listening ports
- Provision tenant projects in OpenShift
- Configure Prisma Cloud to use Istio Ingress Gateway
- Disable automatic learning
- Performing a rolling upgrade of Defenders
- Debug data
