Agentless scanning on Google Cloud platform

[ASachan1]

Hi All,

Hope you are doing well.

Anyone using Agentless scanning for their GCP env? I have a GCP environment with some restrictions ie org policies applied for skip default network creation, external IPs not allowed (but exempted for test project). the service account has appropriate permission (Permissions by feature (paloaltonetworks.com) for Agentless configuration & followed the steps mentioned for cloud account on-boarding for agentless.

Prisma Cloud's is able to create VM automatically, stays running for approx. an hour but doesn't show any vulnerability and compliance report. I would like to know if someone has configured Agentless scanning in their production environment and suggest me what to check i,e any required permissions, rules (firewall/ routes) etc. or if someone can share the best practice/ steps for GCP specific?

- No issue with Azure.

Thanks.

[USheikh]

Hello ASachan1,

Can you please share agentless logs post scan and also share instance log on the VM that is created while it is scanning?

Above requested information, will help me get more information.

Regards,

[kfirdaus]

It would also help to get information on what you actually get when you 

1. Go to 

Monitor > Vulnerabilities > Hosts

2. Click on the Filter hosts text bar.

3. Select the Scanned by filter.

4. Select the Agentless filter.

You can also find the steps listed here:

https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-06/prisma-cloud-compute-edition-admin/confi...