Install the TAS Defender

Get the Prisma Cloud tile.
Log in to the Prisma Cloud console.
Select
Manage > Defender > Deployed Defenders
.
Click
Manual deploy
.
Select the
Orchestrator
deployment method.
Under
Orchestrator type
, select one of the following options:
Tanzu Application Service Defender - Linux
Tanzu Application Service Defender - Windows
On the sidebar, click the
Download
button to get the TAS tile.
Alternatively, you can download the
VMWare Tanzu tile
from under
Manage > System > Utilities
.
Import the Prisma Cloud tile.
Go to the
Tanzu Ops Manager > Installation Dashboard
.
Click the
Import a Product
button.
Select the downloaded tile.
On the left sidebar, the Prisma Cloud for TAS appears.
Click the
plus sign
beside the version number to stage the tile.
Click the tile that was added.
Configure the Defenders.
Return to the Prisma Cloud Console.
Under
The name that Defender will use to connect to this Console
, select the IP address or URL that your TAS environment can reach.
Provide any needed Defender communication port.
If you selected the
Tanzu Application Service Defender - Windows
as the
Orchestrator type
, enable or disable
Runtime protection
.
Provide the Central Console address that the Defender can access. This is only needed if you follow a Project deployment pattern (
Manage > Projects
).
Enable the
Assign globally unique names to Hosts
in the
Advanced Settings
as needed.
Copy the installation scripts from the sidebar. You can deploy Prisma Cloud Defenders on Linux and Windows.
Configure the Prisma Cloud tile.
Return to the Tanzu Ops Manager.
Under
Assign AZs and Networks
, select the
TAS network
and select
Save
.
Under
Prisma Cloud Component Configuration
, paste the installation scripts for the operating systems you are using.
If you don’t provide an installation script, Tanzu doesn’t deploy Defenders for that operating system.
Enter a
Foundation
name (optional). If you don’t enter a Foundation name, you will not be able to use
tas-foundation
label in
Manage > Collections
.
Select
Save
.
Under
Prisma Cloud Proxy configuration
, configure your Proxy as needed if you are using Linux.
Select
Save
.
The Defender on Windows doesn’t support a proxy.
Under
Credentials
, provide your Prisma Cloud credentials for Linux and Windows. Select
Save
. You can use certificates for authentication if you only use Linux. Provide your username and password credentials instead to authenticate the Defender if you use Windows Defenders by themselves or together with Linux Defenders.
Under
Resource configuration
, you can add dedicated Linux VMs to serve exclusively as Linux blobstore scanners. Select
Save
.
Go back to the
Installation Dashboard
.
Click Review Pending Changes.
Select the following products.
Prisma Cloud for TAS
VMWare Tanzu Application Service
Every TAS Isolation segment in your environment.
Apply the changes and wait for the tile to become active.
It can take an hour or longer for the changes to apply and your deployment to complete.
Verify the deployment on Prisma Cloud under
Manage > Defenders
.
After the deployment is complete, the deployed Defenders will appear in the table. The
Host
column shows
Agent ID
of the defended Linux Diego cells and
VM CID
of the defended Windows Diego cells.
You can search and filter your TAS Defenders based on the hostnames.
To fetch the
Agent ID
of your Diego cells:
Log into a Diego cell.
The /var/vcap/instance/dns/records.json file shows how the
Agent ID
maps to a host IP address.
To fetch the
VM CID
of your Diego cells, run bosh vms in the
ops-manager
VM.