Prisma Cloud Discussions

Welcome to the Prisma Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

failed to retrieve repositories info, request: Error: Get EOF, scan prisma cloud to nexus registry

We need to scan our nexus repository with registry scanning rules, but we're getting error below : failed to retrieve repositories info, request: &{Tag: Spec:<repository name>:<connector port>/*:* Type:1 ScanID:20039 RequestDoneFn:<nil> OnDemandScan:false NoDefenderRetries:0}. Error: Get "http://<repository name>:&lt...

Ingestion - Get Azure Private endpoint connections from Azure Resources

Is it possible to ingest private endpoint connections from Azure Resources in resources like SQL Database, App Services, Storage Account and others? I have tried to get this information consulting the Resource Config JSON and I could not find this data.

Prisma cloud Onboarding support AWS Org level || #prismacloud #cspm #cwpp #onboarding #aws

Hi Folks, I am trying to onboard AWS org to Prisma cloud.. When uploading CFT template in the AWS CloudFormation portal under StackSets, I am getting an error (attached a file). I have executed the above steps within mgmt. account as a root user! Do I need to upload the CFT template for org-level under StackSets or Stacks? what could be the re...

Runtime Protection vs Application Security

If I already have my containers onboarded in Runtime protection, I don't see much value in adding them to application security. As they both have vulnerability management. Am I missing something?

Vulnerabilities report in Prisma Cloud

Hi All, I hope you are well. The reason why I am writing this one is that I need help of some PRISMA practitioners. With all of the shiny features being present in the platform, I realized I am unable to get relevant and simple information. I need PRISMA to tell me the amount of vulnerabilities seen in the system for specific CVSS, and discov...

Creating 2 or more hub accounts for Agentless Scanning

Hi Folks,We recently tested agentless scanning using hub account method on one cloud provider somewhat successfully. We are moving onto enabling it for a second cloud provider. I know that Prisma compute section lets you select from multiple hub accounts when you are configuring scanning in Manage --> Cloud accounts. I wanted to know if there...

Blocked Threats Investigation

Hi, I'm getting some blocked threats in Prisma, but I can't see anything about source or destination. Is there a way to check and ensure internal devices haven't initiated the connection?

Prisma & Sentinel Integration.

We are in situation where we wanted to have a Prisma Console integration with Sentinel but not through the MS Native Tool (MS Connector). Wanted to see the possibility of the if at prisma end we hv intelligence to send not all the alerts but on entitled/legitimated to turn into incident ..then these incidents can be send to Syslog….then at Syslo...

RQL Filter Query Syntax Error

I am testing few sample query with JOIN however running into multiple syntax errors. I am trying match Azure NSG list and would like to know, if Azure VNET contain subnet with that specific NSG. NSG -ID to match with VNET-Subnet array contains NSGID. 1,. Does Join works for single elements between X and Y or if there is single to mult...

Identify Image Vulnerability Repeat Findings from two Vulnerability Reports

Am trying to identify how, in PCCE, to identify repeated findings from one image vulnerability report to the previous report?

Microsegmentation EoS label

Dear, I did not find the technical documentation for Prisma Cloud microsegmentation using my bookmark: https://docs.paloaltonetworks.com/content/dam/techdocs/en US/pdf/prisma/prisma-cloud/prisma-cloud-admin-microsegmentation/prismacloud-admin-microsegmentation.pdf. A search on the technical documentation portal did not return a similar documen...

Can we use Prisma cloud WAAS to protect AWS ALB

Hi All, Can we use Prisma cloud WAAS to protect AWS ALB? As I've checked it can protect host or container ..but need to know if it act as WAF same like AWS which check ALB traffic and we can apply rule on ALB.

Prisma Cloud Policy - Check if Logging is enabled for HTTP(S) Load Balancer in GCP

Based on CIS Benchmark, there is an gcloud cli command to check if the Enable logging is enabled. From Google Cloud CLI Run the following command gcloud compute backend-services describe <servicename> Global external Application Load Balancer logging and monitoring | Load Balancing | Google Cloud How can I create a Prisma Cloud pol...

How to Disable TLS 1 and 1.1 in Prisma Cloud ?

Hi All During our Vulnerability Assessment, the vendor found that our VPN URL has TLS 1, 1.1 and 1.2 Enabled. and recommended to disable up to 1.2 and use 1.3 only. I cant find that settings in Cloud Strata Manager. Any idea where is that settings in Strata?

Does intelligence stream for offline environments include stream for Windows container vulnerabilities?

If I use twistcli to download an intelligence stream for offline environments, does the downloaded package include vulnerability data for Windows containers? Are there additional parameters to specify including windows container vulnerabilities? //i.e. running $ twistcli intelligence download --token <ACCESS-TOKEN> Thanks, Honter

Discussions