Next-Generation CASB Discussions

Welcome to the Next-Generation CASB Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Resolved! PRISMA SAAS CASB IMPLEMENTATION GUIDE

Looking for PRISMA SAAS CASB IMPLEMENTATION GUIDE.

Why we need web-security policy while even we having same feature in normal prisma access policy?

Hi Team, Kindly clarify me why we need web-security policy while even we having same feature in normal prisma access policy? Scenario, SaaS security discovered several apps, we can create a policy and later import to websecurity by policy recommendation. But the question here is even the same application can be used in normal security policy i...

Welcome to the Next-Generation CASB Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Tenant Provisioning

Hello, can someone tell me if a new tenant would need to be provisioned if the CDL for SaaS Inline usage is associated with another license type? For example, commercial to FedRamp or vice versa?

CASB "Default_Dummy_Data_Profile" detections for DLP

We're in the process of tuning DLP policies and struggling to filter out a lot of detections for driver's licenses from non-US countries. We've disabled all profiles that reference any of the non-US countries, but still seeing incidents detected for driver's licenses from non-US countries. Today we configured Admin Alerts for Slack Pro and Bus...

Policy Recommendations on Panorama for NGFW in different CSP

Hi all, we have a pair of NGFW in a CSP belonging to a customer, the panorama managing these firewalls is in our - and therefore different - CSP. Is it possible to get the SaaS inline policy recommendations for these firewalls to the panorama or do they have to be in the same CSP?

Resolved! Getting Started Options --Next Gen CASB

Hello, I am looking for other materials with using the SASE CASB. I've been reviewing some of the docs, but I haven't come across any environmental requirements, etc. For Shadow IT discovery, I think that the SaaS Inline API will handle this but does an app like a connector of sorts need to be in place? Are there any references to getting sta...

I am looking to get some learning resources for Prisma Cloud

I am looking to get some learning resources for Prisma Cloud, if possible I also would like to go for certification as it may help us provide DevSecops services to our customers. Please share the resources to get on to this journey.

What types of activity can be monitored in Cloud Security Services?

Hello everyone in the community! I hope you're all doing well. I'm writing because I'm really interested in learning more about Cloud Security Services and I have a few questions that I'm hoping someone can help me with. First of all, I'm curious about what types of activity can be monitored with this service. Specifically, I'd like to know how ...

Resolved! EDL Hosting Service for public cloud providers

Hi, Since any third party can spin up a service in a public cloud, does that mean that subnets in https://docs.paloaltonetworks.com/resources/edl-hosting-service is shared between cloud customers and the cloud provider itself? Specifically, my question aims at Azure. I want to use the list, but how can I make sure that the subnet for say Azure...

Need for Global Admin level rights

Hello, While reviewing the documentation for Prisma SaaS API, I noticed that it doesn't easily spell out why a Global Admin level account is required for the configuration. Specifically what if any functionality are you losing by not having that permission level?

Resolved! Does Palo Alto SaaS Security Plan will have the option to block cut/copy/paste activities inline?

Does Palo Alto SaaS Security Plan will have the option to block cut/copy/paste activities inline?

Free SaaS Security training!

Hello to all on the youtube channel for the live community there is a 2 hour free training for SaaS Security API and probably in the future also a training for the SaaS Security Inline will be added. You can also see the SaaS Security in a workshop if want to play with the system a little more: https://www.youtube.com/playlist?list=PLD6FJ8...

Container STIG output

Does Prisma Cloud have the feature to validate Container STIG output checks w that can be automated in the CI/CD pipeline?

Integrated CASB Makes Deployment Easy and Security Consistent

On May 19th, Palo Alto Networks announced a new cloud security offering, SaaS Security, the only integrated cloud access security broker (CASB) that keeps pace with the SaaS explosion. SaaS Security is a comprehensive solution that comprises two subscription services: SaaS Security Inline and SaaS Security API (formerly known as Prisma SaaS). Al...