Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
Prisma
Prisma Cloud
Prisma Cloud Compute Edition Administrator’s Guide
Vulnerability management
Google Cloud Container Builder

Last Updated:

Thu Dec 09 14:14:35 PST 2021

Current Version:

Self.Hosted 21.04

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

Table of Contents

Search the Table of Contents

Welcome

Releases

Getting started

Product architecture

Support lifecycle

Upcoming support lifecycle changes for Prisma Cloud Compute Edition and modules

Licensing

Prisma Cloud Enterprise Edition vs Compute Edition

Utilities and plugins

Install

Getting started

System requirements

Prisma Cloud container images

Onebox

Kubernetes

OpenShift

OpenShift

Console on Fargate

VMware Tanzu Kubernetes Grid (TKG)

Docker Swarm

Amazon ECS

Windows

Defender types

Install Defender

Install Defender

Install a single Container Defender

Install Container Defender in a cluster

App-Embedded Defender

App-Embedded Defender for Fargate

VMware Tanzu Application Service (TAS) Defender

Serverless Defender

Serverless Defender as a Lambda layer

Auto-defend serverless functions

Install a single Host Defender

Auto-defend hosts

Deploy Prisma Cloud Defender from the GCP Marketplace

Decommission Defenders

Upgrade

Upgrade Prisma Cloud

Upgrade Onebox

Kubernetes

OpenShift

Helm charts

Docker Swarm

Amazon ECS

Manually upgrade single Container Defenders

Manually upgrade Defender DaemonSets

Manually upgrade Defender DaemonSets (Helm)

Manually upgrade Docker Swarm Defenders

Technology overviews

Prisma Cloud Advanced Threat Protection

App-specific network intelligence

Container Runtimes

Radar

Serverless Radar

Prisma Cloud Rules Guide - Docker

Defender architecture

Telemetry

Configure

Rule ordering and pattern matching

Backup and restore

Custom feeds

Configuring Prisma Cloud proxy settings

Custom certs for Console access

Configure scanning

User certificate validity period

Enable HTTP access to Console

Set different paths for Defender and Console (with DaemonSets)

Authenticate to Console with certificates

Customize terminal output

Collections

Tags

Logon settings

Reconfigure Prisma Cloud

Subject Alternative Names

WildFire settings

Authentication

Logging into Prisma Cloud

Integrate with Active Directory

Integrate with OpenLDAP

Integrate Prisma Cloud with Open ID Connect

Integrate with Okta via SAML 2.0 federation

Integrate Google G Suite via SAML 2.0 federation

Integrate with Azure Active Directory via SAML 2.0 federation

Integrate with PingFederate via SAML 2.0 federation

Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services (ADFS) via SAML 2.0 federation

Integrate Prisma Cloud with GitHub

Integrate Prisma Cloud with OpenShift

Non-default UPN suffixes

Compute user roles

Assign roles

Use custom certificates for authorization

Credentials store

Vulnerability management

Malware scanning

Vulnerability Explorer

Vulnerability management rules

Search CVEs

Scan reports

Customize image scanning

Configure registry scans

Registry scanning

Registry scanning

Scan images in Alibaba Cloud Container Registry

Amazon EC2 Container Registry (ECR)

Azure Container Registry (ACR)

Docker Registry v2

Google Container Registry (GCR)

Harbor

IBM Cloud Container Registry

Scan images on Artifactory Docker Registry

OpenShift integrated Docker registry

Trigger registry scans with webhooks

Base images

Configure VM image scanning

Configure code repository scanning

Malware scanning

Vulnerability risk tree

Detect vulnerabilities in unpackaged software

CVSS scoring

Google Cloud Container Builder

Windows container image scanning

Serverless function scanning

VMware Tanzu blobstore scanning

Scan Fargate tasks

Compliance

Compliance Explorer

Enforce compliance checks

CIS Benchmarks

Prisma Cloud Labs compliance checks

Serverless functions compliance checks

Windows compliance checks

Docker Enterprise DISA STIG

Custom compliance checks

Trusted images

Host scanning

VM image scanning

Fargate scanning

Detect secrets

Cloud discovery

OSS license management

Runtime defense

Runtime defense for containers

Runtime defense for hosts

Runtime defense for AWS Fargate

Custom runtime rules

Import and export individual rules

ATT&CK Explorer

Runtime Audits

Event Aggregation

Incident Explorer

Incident types

Incident types

Altered binary

Backdoor admin accounts

Backdoor SSH access

Brute force

Crypto miners

Execution flow hijack attempt

Kubernetes attacks

Lateral movement

Malware

Port scanning

Reverse shell

Suspicious binary

Access control

Role-based access control for Docker Engine

Admission control with Open Policy Agent

Continuous integration

Jenkins plugin

Jenkins Freestyle project

Jenkins Maven project

Jenkins Pipeline project

Run Jenkins in a container

Jenkins pipeline on Kubernetes

CloudBees Core pipeline on Kubernetes

CI plugin policy

Code repo scanning

WAAS

Web-Application and API Security (WAAS)

Deploying WAAS

Firewall Settings

API Protection

DoS protection

Bot Protection

WAAS Access Controls

Advanced Settings

WAAS Analytics

API observations

WAAS custom rules

Firewalls

Cloud Native Network Firewall (CNNF)

Secrets

Secrets manager

Integrate with secrets stores

Secrets Stores

Secrets Stores

AWS Secrets Manager

AWS Systems Manager Parameters Store

Azure Key Vault

CyberArk Enterprise Password Vault

HashiCorp Vault

Inject secrets into containers

Injecting secrets: end-to-end example

Alerts

Alert mechanism

AWS Security Hub

Cortex XSOAR alerts

Email alerts

Google Cloud Pub/Sub

Google Cloud Security Command Center

IBM Cloud Security Advisor

JIRA Alerts

PagerDuty alerts

ServiceNow alerts

ServiceNow alerts

Slack Alerts

Webhook alerts

Audit

Event viewer

Host activity

Administrative activity audit trail

Annotate audit event records

Delete audit logs

Syslog and stdout integration

Log rotation

Throttling audits

Prometheus

Kubernetes auditing

Tools

twistcli

Scan images with twistcli

Scan code repos with twistcli

Install Console with twistcli

Update the Intelligence Stream in offline environments

Deployment patterns

Projects

Migration options for scale projects

Best practices for DNS and certificate management

Caps

Migrating to a SaaS Console

Performance planning

Automated deployment

High Availability and Disaster Recovery guidelines

API

Howto

Configure an AWS Classic Load Balancer for ECS

Configure the load balancer type for AWS EKS

Deploy Defenders outside an OpenShift Cluster

Configure Prisma Cloud Console’s listening ports

Provision tenant projects in OpenShift

Configure Prisma Cloud to use Istio Ingress Gateway

Disable automatic learning

Performing a rolling upgrade of Defenders

Debug data

Welcome
Install
Upgrade
Technology overviews
Configure
Authentication
Vulnerability management
Compliance
Runtime defense
Access control
- Role-based access control for Docker Engine
- Admission control with Open Policy Agent
Continuous integration
WAAS
Firewalls
- Cloud Native Network Firewall (CNNF)
Secrets
Alerts
Audit
Tools
Deployment patterns
API
Howto

Document:Prisma Cloud Compute Edition Administrator’s Guide

Google Cloud Container Builder

Last Updated:

Thu Dec 09 14:14:35 PST 2021

Current Version:

Self.Hosted 21.04

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

Google Cloud Container Builder

As a prerequisite for performing vulnerability scanning with Google Cloud Container Builder as explained here, download scan_helper.c from here.

Recommended For You

Recommended Videos

Recommended videos not found.

© 2022 Palo Alto Networks, Inc. All rights reserved.