Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
Prisma
Prisma Cloud
Prisma Cloud Administrator’s Guide (Compute)
Howto

Last Updated:

Thu May 12 01:29:36 PDT 2022

Current Version:

Prisma Cloud Enterprise Edition

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 22.01
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

Table of Contents

Search the Table of Contents

Welcome

Getting started

Compute SaaS maintenance updates

NAT gateway IP addresses

Product architecture

Support lifecycle

Security Assurance Policy on Prisma Cloud Compute

Licensing

Prisma Cloud Enterprise Edition vs Compute Edition

Utilities and plugins

Install

Getting started

System requirements

Prisma Cloud container images

Kubernetes

OpenShift v4

OpenShift v3.11

Amazon ECS

Windows

Defender types

Install Defender

Install a single Container Defender

Install Container Defender in a cluster

App-Embedded Defender

App-Embedded Defender for Fargate

VMware Tanzu Application Service (TAS) Defender

Serverless Defender

Serverless Defender as a Lambda layer

Auto-defend serverless functions

Install a single Host Defender

Auto-defend hosts

Deploy Prisma Cloud Defender from the GCP Marketplace

Decommission Defenders

Upgrade

Support lifecycle for connected components

Upgrade process

Kubernetes

OpenShift

Helm charts

Amazon ECS

Manually upgrade single Container Defenders

Manually upgrade Defender DaemonSets

Manually upgrade Defender DaemonSets (Helm)

Technology overviews

Intelligence Stream

Prisma Cloud Advanced Threat Protection

App-specific network intelligence

Container Runtimes

Radar

Serverless Radar

Prisma Cloud Rules Guide - Docker

Defender architecture

Host Defender architecture

TLS v1.2 cipher suites

Telemetry

Configure

Rule ordering and pattern matching

Backup and restore

Custom feeds

Configuring Prisma Cloud proxy settings

Prisma Cloud Compute certificates

Configure scanning

User certificate validity period

Enable HTTP access to Console

Set different paths for Defender and Console (with DaemonSets)

Authenticate to Console with certificates

Customize terminal output

Collections

Tags

WildFire settings

Log Scrubbing

Authentication

Access keys

Prisma Cloud Compute User Roles

Compute user roles

Assign roles

Credentials store

Vulnerability management

Prisma Cloud vulnerability feed

Vulnerability Explorer

Vulnerability management rules

Search CVEs

Scan reports

Scanning procedure

Customize image scanning

Configure registry scans

Registry scanning

Scan images in Alibaba Cloud Container Registry

Amazon EC2 Container Registry (ECR)

Azure Container Registry (ACR)

Docker Registry v2

Google Container Registry (GCR)

Harbor

IBM Cloud Container Registry

Scan images on Artifactory Docker Registry

OpenShift integrated Docker registry

Trigger registry scans with webhooks

Base images

Configure VM image scanning

Configure code repository scanning

Agentless scanning

Malware scanning

Vulnerability risk tree

Detect vulnerabilities in unpackaged software

CVSS scoring

Windows container image scanning

Serverless function scanning

VMware Tanzu blobstore scanning

Troubleshoot vulnerability detection

Access control

Role-based access control for Docker Engine

Admission control with Open Policy Agent

Compliance

Compliance Explorer

Enforce compliance checks

CIS Benchmarks

Prisma Cloud Labs compliance checks

Serverless functions compliance checks

Windows compliance checks

DISA STIG compliance checks

Custom compliance checks

Trusted images

Host scanning

VM image scanning

Fargate scanning

Detect secrets

Cloud discovery

OSS license management

Runtime defense

Runtime defense for containers

Runtime defense for hosts

Runtime defense for serverless functions

Runtime defense for App-Embedded

Event Aggregation

Custom runtime rules

Import and export individual rules

ATT&CK Explorer

Runtime Audits

Image analysis sandbox

Incident Explorer

Incident types

Altered binary

Backdoor admin accounts

Backdoor SSH access

Brute force

Crypto miners

Execution flow hijack attempt

Kubernetes attacks

Lateral movement

Malware

Port scanning

Reverse shell

Suspicious binary

Other incident types

Continuous integration

Jenkins plugin

Jenkins Freestyle project

Jenkins Maven project

Jenkins Pipeline project

Run Jenkins in a container

Jenkins pipeline on Kubernetes

CI plugin policy

Code repo scanning

WAAS

Web-Application and API Security (WAAS)

WAAS Explorer

Deploying WAAS

App Firewall Settings

API Protection

DoS protection

Bot Protection

WAAS Access Controls

Advanced Settings

WAAS Analytics

API observations

WAAS custom rules

Detecting unprotected web apps

WAAS Log Scrubbing

WAAS Troubleshooting

Firewalls

Cloud Native Network Firewall (CNNF)

Secrets

Secrets manager

Integrate with secrets stores

Secrets Stores

AWS Secrets Manager

AWS Systems Manager Parameters Store

Azure Key Vault

CyberArk Enterprise Password Vault

HashiCorp Vault

Inject secrets into containers

Injecting secrets: end-to-end example

Alerts

Alert mechanism

AWS Security Hub

Cortex XDR alerts

Cortex XSOAR alerts

Email alerts

Google Cloud Pub/Sub

Google Cloud Security Command Center

IBM Cloud Security Advisor

JIRA Alerts

PagerDuty alerts

ServiceNow alerts

ServiceNow alerts

Slack Alerts

Splunk alerts

Webhook alerts

Audit

Event viewer

Host activity

Administrative activity audit trail

Annotate audit event records

Delete audit logs

Syslog and stdout integration

Log rotation

Throttling audits

Prometheus

Kubernetes auditing

Tools

twistcli

Scan images with twistcli

Scan code repos with twistcli

Scan Infrastructure as Code (IaC) with twistcli

Deployment patterns

Best practices for DNS and certificate management

Storage limits for audits and reports

Performance planning

API

Howto

Disable automatic learning

Debug data

Welcome
Install
Upgrade
Technology overviews
Configure
Authentication
Vulnerability management
Access control
- Role-based access control for Docker Engine
- Admission control with Open Policy Agent
Compliance
Runtime defense
Continuous integration
WAAS
Firewalls
- Cloud Native Network Firewall (CNNF)
Secrets
Alerts
Audit
Tools
Deployment patterns
API
Howto
- Disable automatic learning
- Debug data

Document:Prisma Cloud Administrator’s Guide (Compute)

Howto

Last Updated:

Thu May 12 01:29:36 PDT 2022

Current Version:

Prisma Cloud Enterprise Edition

Version Prisma Cloud Enterprise Edition
Version Self-Hosted 22.01
Version Self-Hosted 21.08
Version Self-Hosted 21.04
Version Self-Hosted 20.12 (EoL)
Version Self-Hosted 20.09 (EoL)
Version Self-Hosted 20.04 (EoL)
Version Self-Hosted 19.11 (EoL)

Howto

Edit on GitHub

This section contains guides for deploying various advanced setups.

Disable automatic learning

Recommended For You

Recommended Videos

Recommended videos not found.

© 2022 Palo Alto Networks, Inc. All rights reserved.