How Prisma Cloud Protects its SAAS platform

[asharma160]

Hello Everyone,

I want to know how PANW team protects its Prisma Cloud tenant from attacks and vulnerability. It will be help full if any documentation or compliance is provided by the PANW.

Prisma Cloud 

[LMegrelis]

Hello! 

Prisma Cloud® is a Cloud Native Application Protection Platform (CNAPP), providing you with the industry’s broadest security and compliance coverage for applications, data, and infrastructure, helping you secure your entire technology stack, from Code to Cloud.

Below are just a few examples of its capabilities around prevention from attacks and vulnerabilities. Do you have a more specific need you are trying to meet? Prisma Cloud Application security or Prisma Cloud Runtime protection? If you can tell me more about your environment I could tailor my response accordingly. 

Attack Path Policies documentation 

https://docs.prismacloud.io/en/enterprise-edition/content-collections/governance/attack-path-policie...

Workload protection policies documentation 

https://docs.prismacloud.io/en/enterprise-edition/content-collections/governance/workload-protection...

Built in Compliance standards documentation

https://docs.prismacloud.io/en/enterprise-edition/content-collections/compliance/compliance-standard...

I invite you to explore some of our documentation and I will happily answer any follow up questions you may have. 

[asharma160]

Thank you @LMegrelis for response.
My question is regarding how the Palo Alto Networks (PANW) team protects the Prisma Cloud tenant and its underlying infrastructure from vulnerabilities and attacks. I am not inquiring about how customers secure their environments using Prisma Cloud, but rather how PANW ensures the security of the Prisma Cloud service itself. For instance, what measures does PANW have in place to mitigate Distributed Denial of Service (DDoS) attacks targeting Prisma Cloud, or to address situations where a cloud service provider's infrastructure, on which Prisma Cloud relies, experiences a compromise?

[LMegrelis]

Hello! 

Thanks for clarifying. 

The Prisma Cloud architecture uses Cloudflare for DNS resolution of web requests and for protection against distributed denial-of-service (DDoS) attacks. The documentation includes a network flow diagram that outlines the infrastructure within a region.

Please see our documentation on Prisma Cloud DataFlow 

https://docs.prismacloud.io/en/enterprise-edition/content-collections/get-started/prisma-cloud-platf...

Let me know if you have any further questions. Thanks

[asharma160]

Hello @LMegrelis,

I am aware about this solution stack can you help me how actually PANW team monitor and protect the Prisma cloud saas platform from compromise or any attack don't stick on DoS only.

[LMegrelis · Accepted solution]

Hello! 

I invite you to download our Prisma Cloud Privacy Datasheet this dives deeper into how Prisma Cloud protects Data more into the ends and outs of what it takes to make Prisma Cloud safe for its customers.  

https://www.paloaltonetworks.com/resources/datasheets/prisma-cloud-privacy

Please let me know if you have any additional questions and I will happily assist you. 

[asharma160 · Accepted solution]

Thank you @LMegrelis  for sharing that document. While I had seen it before, your re-sharing prompted me to review it again. In doing so, I discovered the Palo Alto Networks Trust 360 program and was able to gather all the relevant information.