Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
Prisma
Prisma Cloud
Prisma Cloud Compute Edition Administrator’s Guide
Configure

Last Updated:

May 9, 2022

Current Version:

Self.Hosted 22.01

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 22.01
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

Table of Contents

Search the Table of Contents

Welcome

Releases

Getting started

Product architecture

Support lifecycle

Security Assurance Policy on Prisma Cloud Compute

Licensing

Prisma Cloud Enterprise Edition vs Compute Edition

Utilities and plugins

Install

Getting started

System requirements

Prisma Cloud container images

Onebox

Kubernetes

OpenShift v4

OpenShift v3.11

Console on Fargate

Amazon ECS

Windows

Defender types

Install Defender

Install a single Container Defender

Install Container Defender in a cluster

App-Embedded Defender

App-Embedded Defender for Fargate

VMware Tanzu Application Service (TAS) Defender

Serverless Defender

Serverless Defender as a Lambda layer

Auto-defend serverless functions

Install a single Host Defender

Auto-defend hosts

Deploy Prisma Cloud Defender from the GCP Marketplace

Decommission Defenders

Upgrade

Support lifecycle for connected components

Prisma Cloud’s backward compatibility and upgrade process

Upgrade Onebox

Kubernetes

OpenShift

Helm charts

Amazon ECS

Manually upgrade single Container Defenders

Manually upgrade Defender DaemonSets

Manually upgrade Defender DaemonSets (Helm)

Technology overviews

Intelligence Stream

Prisma Cloud Advanced Threat Protection

App-specific network intelligence

Container Runtimes

Radar

Serverless Radar

Prisma Cloud Rules Guide - Docker

Defender architecture

Host Defender architecture

TLS v1.2 cipher suites

Telemetry

Configure

Rule ordering and pattern matching

Backup and restore

Custom feeds

Configuring Prisma Cloud proxy settings

Prisma Cloud Compute certificates

Configure scanning

User certificate validity period

Enable HTTP access to Console

Set different paths for Defender and Console (with DaemonSets)

Authenticate to Console with certificates

Configure custom certs from a predefined directory

Customize terminal output

Collections

Tags

Logon settings

Reconfigure Prisma Cloud

Subject Alternative Names

WildFire settings

Log Scrubbing

Authentication

Logging into Prisma Cloud

Integrating with an IdP

Integrate with Active Directory

Integrate with OpenLDAP

Integrate Prisma Cloud with Open ID Connect

Integrate with Okta via SAML 2.0 federation

Integrate Google G Suite via SAML 2.0 federation

Integrate with Azure Active Directory via SAML 2.0 federation

Integrate with PingFederate via SAML 2.0 federation

Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services (ADFS) via SAML 2.0 federation

Integrate Prisma Cloud with GitHub

Integrate Prisma Cloud with OpenShift

Non-default UPN suffixes

Compute user roles

Assign roles

Credentials store

Vulnerability management

Prisma Cloud vulnerability feed

Vulnerability Explorer

Vulnerability management rules

Search CVEs

Scan reports

Scanning procedure

Customize image scanning

Configure registry scans

Registry scanning

Scan images in Alibaba Cloud Container Registry

Amazon EC2 Container Registry (ECR)

Azure Container Registry (ACR)

Docker Registry v2

Google Container Registry (GCR)

Harbor

IBM Cloud Container Registry

Scan images on Artifactory Docker Registry

OpenShift integrated Docker registry

Trigger registry scans with webhooks

Base images

Configure VM image scanning

Configure code repository scanning

Agentless scanning

Malware scanning

Vulnerability risk tree

Detect vulnerabilities in unpackaged software

CVSS scoring

Windows container image scanning

Serverless function scanning

VMware Tanzu blobstore scanning

Scan Fargate tasks

Troubleshoot vulnerability detection

Compliance

Compliance Explorer

Enforce compliance checks

CIS Benchmarks

Prisma Cloud Labs compliance checks

Serverless functions compliance checks

Windows compliance checks

DISA STIG compliance checks

Custom compliance checks

Trusted images

Host scanning

VM image scanning

Fargate scanning

Detect secrets

Cloud discovery

OSS license management

Runtime defense

Runtime defense for containers

Runtime defense for hosts

Runtime defense for serverless functions

Runtime defense for App-Embedded

Custom runtime rules

Import and export individual rules

ATT&CK Explorer

Runtime Audits

Event Aggregation

Image analysis sandbox

Incident Explorer

Incident types

Altered binary

Backdoor admin accounts

Backdoor SSH access

Brute force

Crypto miners

Execution flow hijack attempt

Kubernetes attacks

Lateral movement

Malware

Port scanning

Reverse shell

Suspicious binary

Other incident types

Access control

Role-based access control for Docker Engine

Admission control with Open Policy Agent

Continuous integration

Jenkins plugin

Jenkins Freestyle project

Jenkins Maven project

Jenkins Pipeline project

Run Jenkins in a container

Jenkins pipeline on Kubernetes

CI plugin policy

Code repo scanning

WAAS

Web-Application and API Security (WAAS)

WAAS Explorer

Deploying WAAS

App Firewall Settings

API Protection

DoS protection

Bot Protection

WAAS Access Controls

Advanced Settings

WAAS Analytics

API observations

WAAS custom rules

Detecting unprotected web apps

WAAS Log Scrubbing

WAAS Troubleshooting

Firewalls

Cloud Native Network Firewall (CNNF)

Secrets

Secrets manager

Integrate with secrets stores

Secrets Stores

AWS Secrets Manager

AWS Systems Manager Parameters Store

Azure Key Vault

CyberArk Enterprise Password Vault

HashiCorp Vault

Inject secrets into containers

Injecting secrets: end-to-end example

Alerts

Alert mechanism

AWS Security Hub

Cortex XDR alerts

Cortex XSOAR alerts

Email alerts

Google Cloud Pub/Sub

Google Cloud Security Command Center

IBM Cloud Security Advisor

JIRA Alerts

PagerDuty alerts

ServiceNow alerts

ServiceNow alerts

Slack Alerts

Splunk alerts

Webhook alerts

Audit

Event viewer

Host activity

Administrative activity audit trail

Annotate audit event records

Delete audit logs

Syslog and stdout integration

Log rotation

Throttling audits

Prometheus

Kubernetes auditing

Tools

twistcli

Scan images with twistcli

Scan code repos with twistcli

Install Console with twistcli

Update the Intelligence Stream in offline environments

Deployment patterns

Projects

Migration options for scale projects

Best practices for DNS and certificate management

Storage limits for audits and reports

Migrating to a SaaS Console

Performance planning

Automated deployment

High Availability and Disaster Recovery guidelines

API

Howto

Configure an AWS Classic Load Balancer for ECS

Configure the load balancer type for AWS EKS

Configure Prisma Cloud Console’s listening ports

Provision tenant projects in OpenShift

Disable automatic learning

Debug data

Welcome
Install
Upgrade
Technology overviews
Configure
Authentication
Vulnerability management
Compliance
Runtime defense
Access control
- Role-based access control for Docker Engine
- Admission control with Open Policy Agent
Continuous integration
WAAS
Firewalls
- Cloud Native Network Firewall (CNNF)
Secrets
Alerts
Audit
Tools
Deployment patterns
API
Howto

Document:Prisma Cloud Compute Edition Administrator’s Guide

Configure

Last Updated:

May 9, 2022

Current Version:

Self.Hosted 22.01

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 22.01
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

Configure

Edit on GitHub

After installing Prisma Cloud, configure it to meet your operational and security requirements.

Rule ordering and pattern matching

Backup and restore

Configuring Prisma Cloud proxy settings

Prisma Cloud Compute certificates

Configure scanning

User certificate validity period

Enable HTTP access to Console

Set different paths for Defender and Console (with DaemonSets)

Authenticate to Console with certificates

Configure custom certs from a predefined directory

Customize terminal output

Reconfigure Prisma Cloud

Subject Alternative Names

WildFire settings

Recommended For You

Recommended Videos

Recommended videos not found.

© 2022 Palo Alto Networks, Inc. All rights reserved.