topic Prisma Cloud Data Security - Malware Wildfire in Prisma Cloud Discussions

Prisma Cloud Data Security - Malware Wildfire

vhdomingos — Mon, 19 Sep 2022 02:13:22 GMT

I have a doubt about the Prisma Cloud data security module. The integration only supports monitor mode, but when a file with malware is found in a bucket, and the wildfire gives the malware verdict, is the file blocked or only notified that the file is infected?

Re: Prisma Cloud Data Security - Malware Wildfire

BCastillo — Tue, 20 Sep 2022 00:03:27 GMT

Hello,

Thank you for the question. Prisma Cloud does not have any access or control to your cloud environment when a file with malware is found in a bucket. Prisma Cloud detects malware and provides visibility into how your data is exposed, but it does not block the file.

If you want to generate alerts, you must create an alert rule and include the data policies for which you want alerts.

If you would like to learn more, please read into this document: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security/monitor-data-security-scan-prisma-cloud/data-policies

Re: Prisma Cloud Data Security - Malware Wildfire

vhdomingos — Tue, 20 Sep 2022 01:23:34 GMT

TKS for answer!!!