topic Re: Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP in Prisma Cloud Discussions

Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP

QNiska1 — Wed, 02 Sep 2020 17:12:54 GMT

Does the Asset Inventory include all Public IP Addresses? or is this need to be a feature request?

Re: Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP

kchen — Wed, 12 Jun 2019 23:54:44 GMT

Asset Inventory currently only include resources and objects returned from metadata scans. It doesn't include a list of public IPs, so this would need a feature request.

Re: Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP

QNiska1 — Wed, 12 Jun 2019 23:55:35 GMT

Thanks for the update, Is there a portal for feature requests as of yet for Prisma Public Cloud?

Re: Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP

ebeuerlein — Wed, 12 Jun 2019 23:55:59 GMT

Not as of yet, but you can file a support ticket and note that it is a feature request and put the request in the body.

Re: Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP

jjohn_gialluca@optum.com — Wed, 12 Jun 2019 23:56:25 GMT

Three RQL querries for Amazon:

config where api.name = 'aws-ec2-describe-instances' addcolumn privateIpAddress

config where api.name = 'aws-ec2-describe-instances' and json.rule = publicIpAddress exists

config where api.name = 'aws-ec2-describe-instances' AND json.rule = publicIpAddress exists and publicIpAddress is not empty

Is there an Azure equivalent to aws-ec2-describe-instances?

Re: Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP

kchen — Thu, 13 Jun 2019 00:03:37 GMT

Yes, config where api.name = 'azure-vm-list' is the direct equivalent.

For your use case, you can try:

config where api.name = 'azure-vm-list' AND json.rule = ['properties.networkProfile'].networkInterfaces[*].publicIpAddressId exists