Prisma Cloud Integrations - Must have or Optional

John_J — Tue, 27 Jul 2021 20:00:03 GMT

I'm doing a cost analysis on multiple AWS security tools and Prisma Cloud Enterprise. From looking at the Prisma Cloud Admin Guide it looks like we can ingest logs from Amazon GuardDuty, AWS Inspector, and AWS Security Hub. Can Prisma Cloud Enterprise perform the same security functions as these tools or does it need to use these tools to perform their respective security functions?

For example, can Prisma Cloud Enterprise perform threat detection without the use of GuardDuty?

If Prisma Cloud Enterprise can perform threat detection without ingesting logs from GuardDuty is there a significant benefit to having threat detection from both Prisma Cloud Enterprise and GuardDuty?

Thanks!

Re: Prisma Cloud Integrations - Must have or Optional

AAlatar — Thu, 12 Aug 2021 04:02:54 GMT

Hi,

Amazon GuardDuty is a security monitoring service that analyzes and processes Virtual Private Cloud (VPC) Flow Logs and AWS CloudTrail event logs. GuardDuty uses security logic and AWS usage statistics techniques to identify unexpected and potentially unauthorized and malicious activity.

Prisma Cloud integrates with GuardDuty and extends its threat visualization capabilities. Prisma Cloud starts ingesting GuardDuty data, correlates it with the other information that Prisma Cloud already collects, and presents contextualized and actionable information through the Prisma Cloud app.

topic Prisma Cloud Integrations - Must have or Optional in Prisma Cloud Discussions

Prisma Cloud Integrations - Must have or Optional

Re: Prisma Cloud Integrations - Must have or Optional