Prisma Cloud Discussions

Welcome to the Prisma Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

prismaCloudScanImage doesn't find vulnerabilities that are otherwise discovered with runtime radars

We have setup twistlock / prisma cloud to scan our images for vulnerabilities and compliance. While given the same rules, the runtime defence radars discover 2 vulnerabilities and 2 compliance violations in a particular image, when I run a scan with prismaCloudScanImage jenkinsplugin, it only reports the 2 compliance issues, but not the vulnera...

Support to externalize MongoDB used in twistlock console

I'm using twistlock console as a docker container running in Kubernetes cluster with the default configuration. I wanted twistlock console to use the external mongo db instance I have in my cluser instead of its internal DB. Is there any configuration parameters exposed so that I can pass the exernal DB details to the twistlock container?

Python requirements.txt

For Python, Prisma Cloud picks up vulnerabilities found in packages defined in the requirements.txt file in codebases. However, I could easily set up a Docker image to run `pip install dangerous-package==1.1.2`, and that would run long before any codebase enters the picture. Does Prisma Cloud also check packages pre-installed on Docker images?

Prisma Cloud Compute function scan on Azure does not detect change in package.json dependency

Prisma Cloud newbie here. I'm trying to figure out why the vulnerability scan for functions in Prisma Cloud does not detect changes to a CVE that was fixed in a dependency of an Azure function app in our environment. It does detect the Azure function in question, so the connection to Azure seems to be in order. The function is written in javascr...

Is there a way to send Prisma Compute Alerts to 3 different Projects within JIRA mapped to Dev, UAT and PROD environments?

Is there a way to send Prisma Compute Alerts to 3 different Projects within JIRA mapped to Dev, UAT and PROD environments?- While i can configure alerts based on collections mapped to different Environments, I am not sure how to map the alerts to different projects in JIRA - one for each environment- On Prisma Cloud we are able to do this, howev...

Issue With License Credits After 21.08 Upgrade

Hey fellows, We have recently updated our Prisma Cloud Compute Console from 21.04 to 21.08 and it had a weird affect on the credits count. It looks like something in 21.08 causes the number of serverless defenders to spike even though we are not using any. Does anyone have any suggestions on this issue?

Custom compliance scripts for Alpine

We have a desire create compliance checks for Alpine images. Using the RHEL 8 STIG as a template, I'm attempting to script out the same kind of checks that would run on a Busy Box based system. Before I start this daunting task, I want to see if anybody has done anything similar and if they would be willing to share their scripts? Link to RHEL...

Imagepullbackoff Prisma cloud console

I am trying deploy Prisma compute console on AKS cluster but facing some issue with pod creation, services, deployment, service account are being created.

Prisma Access : CLI or SSH Access

Hello, is there a way to access Prisma via CLI or SSH? Something similar to accessing a firewall through CLI or SSH. The reason is to validate whether or not a user actually belongs to an AD group. We have a policy restricted based on user-id and group-mapping. The user is added to the correct group but traffic is not hitting the rule. It wo...

S3 API not listing the Object Lock Status

Hi Team,Prisma Cloud RQL S3 API not listing the Object Lock Status for my below RQL , need your help and advice.config from cloud.resource where api.name = 'aws-s3-access-point' AND json.rule = policyStatus contains "Object Lock"Regards,VJ

Networking runtime policy failed to detect traffic to ec2 meta-data IP address

Hi, I've learned Prisma Cloud in the past couple of weeks, and I have an issue with the networking runtime policy that I've been configured. It can't detect traffic to EC2 meta-data IP address whether using alert or block. But when I'm using host runtime policy, it detects the traffic to that address. Any idea what can be done to solve this issu...

Need expert advice on below quries.

Hi All, Need expert advice on below. 1. How to use twistlock CLI for modifying the policy and rules for the console. 2. How to import the rest of the compliance template (apart from attachment)while creating a new policy. Please also share the location to import the compliance standard template.3. How to modify the compliance standard for e...

Prisma Cloud Compute : How to know the VM Tags that discover from AWS resources?

Hello Everyone, I have the issue about VM Tags discover from the Prisma Cloud compute -> Defend - > Compliance -> Cloud Platform -> VM Tags. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/configure/collections In the documentation describe Prisma Cloud Compute support AWS Tags with VM Tags that dis...

Gitlab CI/CD + Prisma Cloud invalid credentials

Hello, I've been trying to do an integration with Gitlab CI/CD through the Prisma Cloud extension, in order to perform scans I used this documentation as a guide. Also I included this yml file in the pipeline. i got the following error: /tmp/twistcli: line 1: {err:invalid credentials}: command not found I have used access key and secret key ...

DeepinScreenshot_Seleccionar área_20210114180402.png

Prisma Cloud Compute Sentinel Integration with Azure Functions

I am looking to integrate Prisma Cloud Compute (Twistlock) container runtime alerts with Azure Sentinel via Azure Functions instead of Logic Apps. Has anyone tested this and if so, could you provide the steps on how this can be done? Prisma Cloud

Discussions