About lpingali

The Prisma Certified Cloud Security Engineer (PCCSE) certification validates the knowledge, skills and abilities required to onboard, deploy and administer all aspects of Prisma Cloud.   Promotional Discount The Palo Alto Networks certification, Prisma Certified Cloud Security Engineer (PCCSE), adds to our role-based certification portfolio for professionals to validate their knowledge, skills, and abilities in Cloud Security.   Make sure to take advantage of the promotion in April 2021. Get the  details on this registration fee discount by downloading the PDF file attached to this article.   About Palo Alto Networks PCCSE Certification Individuals with the PCCSE certification will have demonstrated in-depth knowledge of Palo Alto Networks Prisma Cloud technology and resources.  Check out the details on the study guide, blueprint and practice tests.   Registration is open for Prisma Certified Cloud Security Engineer (PCCSE)! Be among the first to certify. For registration and other resources, follow the links below.    PCCSE Resources:  PCCSE Datasheet   PCCSE Blueprint PCCSE FAQ PCCSE Study Guide     REGISTER FOR PCCSE CERTIFICATION HERE     Additional Resources For more information, you can visit the Certifications area here on LIVEcommunity. Or, join a discussion or start a new one on the Certification Discussions forum right now.   Watch the  PCCSE & PCSAE Webinar Replay  on-demand.   Cybersecurity is a fast-changing industry where skills need to be constantly updated and the PCCSE will validate and showcase the knowledge, skills, and abilities of various parts of the Palo Alto Networks product portfolio, all while aligning you with the global cybersecurity industry leader.   PCCSE certification validates the knowledge, skills and abilities required to onboard, deploy and administer all aspects of Prisma Cloud. Individuals with the PCCSE certification will have demonstrated in-depth knowledge of Palo Alto Networks Prisma Cloud technology and resources.  Be among the first to certify with the new certification!   ... View more

Prisma Cloud Products and Customer Success Webinar Recordings   Microseg Update - Automating Microsegmentation policies using App Profiling and Out of Box templates Please join us to learn more about cloud network security module in Prisma Cloud. You can implement a single network security policy model that works on any cloud or Datacenter environment across different workload types (containers/VMs/Hosts). In this demo focused webinar, we will show you how you can easily create microsegmentation policies by using the App Profiling capability.   Prisma Cloud Monthly Product Overview:   Cloud Code Security Features Please join Gilad Mark and Taylor Smith to learn more about the cloud code security module in Prisma Cloud. You can do IaC security, software composition analysis (SCA), drift detection and secret detection using the module. In this demo focused webinar, we will show you the existing functionality as well as give a sneak peek in the upcoming functionality.   Prisma Cloud Monthly Product Overview:   Adoption Advisor and CIEM/IAM Join us for this hands on demo with Product Manager, Izabella Yankelevich:   Adoption Advisor: The Adoption Advisor aims to improve product adoption by adding visibility into feature utilization and undiscovered product capabilities. During this session, we will go over the objectives of the Adoption Advisor and walkthrough.   CIEM/IAM: As organizations increasingly adopt Infrastructure-as-a-Service (IaaS) models for cloud development, the number of entities that are granted access to critical infrastructure necessarily grows as well. However, organizations must ensure these entitlements are tightly controlled. To help our customers better address these growing risks, Prisma Cloud offers Cloud Infrastructure Entitlement Management (CIEM) multi-cloud capabilities. These capabilities include: * Net effective permissions analysis: Seamlessly analyze and gain visibility for accounts, resources, and workloads. * IDP integration: Ingest single sign-on (SSO) data from IDPs to calculate net-effective user permissions, no matter which CSP or service the user is accessing.    Prisma Cloud Monthly Product Overview: Cloud Security Posture Management (CSPM) Update February 2022 Palo Alto Networks will discuss new CSPM capabilities including TOR-based threat detection, Cloud Network Analyzer-based policies that detect cloud resources that are truly exposed to the Internet, and others   Prisma Cloud Monthly Product Overview: 22.01 Prisma Cloud Compute (Joule) Release January 2022 With the proliferation of virtual machines, containers, Platform-as-a-Service and Serverless architectures, security, infrastructure, and DevOps teams need a centralized solution to provide visibility and protection across the continuum of cloud native architectures to address vulnerabilities, manage compliance, and enable runtime protection. For example, with a   vulnerability like Log4Shell, security teams would quickly want to identify vulnerable applications while also protecting their applications from threats and attacks. Please join us and learn about the new Cloud Workload Protection and Web App & API Security additions with our Prisma Cloud Joule release. Release highlights include: General availability of Agentless Security to scan VMs on AWS:   By adding agentless security we are increasing the speed and simplicity of initial scanning and risk prioritization, providing a quick posture overview without deploying agents. Prisma Cloud is the first on the market offering both agentless and agent-based security for comprehensive protection. Pre-Deployment virtual machine image library analysis for Azure and Google Cloud:   Seamless scanning of machine images now supports two additional public clouds. Kubernetes auditing enhancements for AKS and EKS:   Security and DevOps teams can now capture and analyze Kubernetes auditing data from public cloud Kubernetes services to identify risks and security events. Enhancement to vulnerability management:   Extended and granular scope for tags for enhanced exception and metadata reporting on vulnerabilities. Web Application and API Security:   New analytics dashboards for improved web application attack visibility and support for gRPC protection. Prisma Cloud Monthly Product Overview: "Code-to-cloud" security for AWS  November 2021 Palo Alto Networks will discuss our current capabilities with AWS and how far we've come. We will present what is on the horizon, and give a look at how all our technologies are coming together. Come and see what Prisma Cloud's capabilities for AWS are, and hear why we are the best cloud security platform for AWS.   Prisma Cloud Monthly Product Overview: Why Prisma Cloud is the best cloud security Platform for Azure October 2021 Palo Alto Networks will discuss our current capabilities with Microsoft Azure and how far we've come. We will present what is on the horizon, and give a look at how all our technologies are coming together. Come and see what Prisma Cloud's capabilities for Microsoft Azure are, and hear why we are the best cloud security platform for Microsoft Azure   Prisma Cloud Monthly Product Overview: Prisma Cloud Compute 21.08 (Iverson Release) October 2021 Join us to learn about the new capabilities and improvements in the latest Prisma Cloud's Cloud Workload Protection - Release 21.08 (Iverson). In this session, we will discuss some of the key capabilities of the release. 1. Container Security: ML-driven pre-deployment image analysis sandbox. 2. Host Security: Auto-protection for virtual machines on Azure and Google Cloud. 3. Web Application and API Security: Windows support, service mesh support, and improved API telemetry. 4. SaaS improvements: Deeper integration with alerts, auto-discovery of all cloud workloads 5. Partner Update: Prisma Cloud is a Red Hat® Certified Technology Vulnerability Scanner   Prisma Cloud Monthly Product Overview: Prisma Cloud CSPM - Network-based Data Exfiltration Detection August 2021   Data breaches in public cloud environments continue to be a significant problem. To help address it, Prisma Cloud recently released a new threat detection capability - Network-based data exfiltration detection. Prisma Cloud uses advanced machine learning (ML) algorithms to   analyze network flow logs to create a model of baseline activity.   It can then detect deviations from that baseline that could signal malicious data exfiltration attempts, and create an alert. Join us and learn about this new capability as well as other existing threat detection capabilities. Blog link: https://www.paloaltonetworks.com/blog/prisma-cloud/how-to-set-up-prisma-cloud-threat-detection/     Prisma Cloud Monthly Product Overview: Preview of CSPM 2.0 Launch & Major Policy Updates  July 2021   Prisma Cloud (CSPM) Delivers Five New Innovations to Help Security Teams Reduce Alert Noise, Detect Advanced Threats and Simplify Cloud Data Security. We are excited to add new CSPM functionality to this stack to help further reduce risks and detect advanced attacks across cloud infrastructures: True Internet Exposure Visibility-as-Code Network Data Exfiltration Detection Anomalous Compute Provisioning Detection Customizable Object-Level Scanning for AWS S3 21.7.2 Policy Updates for Alert Fatigue     Prisma Cloud Monthly Product Overview: MITRE Att&ck Capabilities - Prisma Cloud and Compute June 2021     The MITRE ATT&CK® knowledge base is the most widely adopted framework for security teams across the industry. Prisma Cloud now supports MITRE ATT&CK® framework for various use cases. In this webinar, Prisma Cloud Product Management team will present an overview and hands-on demo to show how to leverage the updated ATT&CK frameworks to enhance your Cloud Security Posture Management and Cloud Workload Protection.     Prisma Cloud Monthly Product Overview: New Threat Detection capabilities in Prisma Cloud  May 2021     In addition to providing cloud visibility, compliance and governance, Prisma Cloud has been providing Machine Learning and Threat Intelligence based threat detection for years. We recently released a new threat detection capability - anomalous compute provisioning - that can detect threats such as cryptojacking. Come and learn about this new capability as well as other existing threat detection capabilities that can detect issues such as account hijack, excessive login failures, port scan, port sweep and others. We will also discuss where we are going with our threat detection roadmap.     Prisma Cloud Monthly Product Overview: Compute & Microsegmentation Release Update April 2021     Learn about what is new in the upcoming Prisma Cloud with respect to the Compute & Microsegmentation capabilities.      Prisma Cloud Monthly Product Overview: Oracle Cloud (OCI) Overview March 2021     Prisma Cloud has extended its cloud security posture management to Oracle Cloud Infrastructure (OCI). The Prisma Cloud Product Management team will present an overview and hands-on demo on how cloud and security teams using Prisma Cloud on OCI can quickly get onboarded and gain comprehensive visibility for all multi- and hybrid-cloud assets in a single console to help understand their cloud attack surface. Join us to enhance the security of your cloud workloads on OCI!   Prisma Cloud Monthly Product Overview: Data Security for AWS Feb. 2021 Prisma Cloud Data Security is a new Prisma Cloud Module in the Cloud Security Posture Management (CSPM) pillar. Our PM team reviews the customer challenges this new module solves in addition to all of the capabilities currently available within the Data Security Module (currently AWS S3 only).   Prisma Cloud Monthly Product Overview: Prisma Cloud Enterprise Suite January Updates Jan. 2021 Join us this month to get insight into the latest release of Prisma Cloud Enterprise including our Cloud Security Posture Management, and Cloud Workload Protection Platforms. The Prisma Cloud Product Management team will present a overviews and hands-on demos of the new features we’ve added in the latest major release, such as Web-Application and API Security (WAAS) updates, host security, container security, and shift-left enhancements in Prisma Cloud Compute (CWPP), as well as Alarm Center updates in Prisma Cloud Enterprise (CSPM).   IAM Security Roadmap Dec. 2020 The new Prisma Cloud IAM Security module is an industry-leading CIEM solution. it automatically calculates effective permissions across cloud service providers, detects overly permissive access and suggests corrections to reach least privilege entitlements. Join the IAM PM team (Bar Schwartz, Shaked Zin) as they present a hands-on demo of the new module.   Prisma Cloud - Shift Left + CNSP Nov. 2020 New Prisma Cloud DevOps Inventory UI is coming in 20.11.2! Join us to learn to configure this UI as well as brand new "build" alert rules. In addition, we will talk about drift detection, and sign up interested customers for the upcoming design partner program. The microsegmentation private beta is released on Prisma Cloud! Join us for a walk thru of the product and how it will fit into the Cloud Network Security module. Learn how you can visualize and secure communications in kubernetes, between VMs and/or containers, using identity. We will also talk about how to identify customers that would be a good fit for the private beta.   Prisma Cloud - Compute Workload Protection (CWP) Oct. 2020 Introducing Prisma Cloud Compute 20.09, the latest update to our Cloud Workload Protection Platform. Join the Compute PM team (Aqsa Taylor, Avi Shulman, Hari Srinivasan, Tomer Spivak, and Pradnesh Patil) as they present a hands-on demo of the new features we’ve added in the latest major release, such as cluster aware radar, git repo scanning, enhanced host security, and Compute SaaS integration in Prisma Cloud Enterprise Edition.   Roadmap Session - Prisma Cloud Compute Sept. 2020 Learn about what is new in the upcoming Prisma Cloud Compute Release - Enhanced cluster awareness across the product, more integrated Cloud Account onboarding process between Compute and the Prisma Cloud platform, our first step in securing packages prior to build time with GIT repository scanning, an enhanced look to our Host security and our new and improved application firewall capability, transitioning CNAF into WAAS (Web Application and API Security).   Product Update Aug. 2020 Learn about the recent releases and the product roadmap.   Network Security and Micro-segmentation July 2020 Autofocus Integration (Network Security) & Micro-segmentation   Sneak Preview of Prisma Cloud Data Security (DLP) June 2020 Brief preview of upcoming  Data Security module and Q&A about Data security   Prisma Cloud Product Update May 2020 Learn about the recent releases and the roadmap.   Shift Left + Prisma Cloud Compute SaaS Integration Phase 2 Apr. 2020 For developers & DevOps: tools to use natively in their IDE, Git and CICD environments; and Prisma Cloud - Compute integration features.   Office Hours with Customer Success - Incident Response Case Study (Part 2) Mar. 2020 Malware — Investigate and Remediate.   Office Hours with Customer Success - Incident Response Case Study (Part 1) Feb. 2020 Malware — Incident and Impact.   Prisma Cloud Product Roadmap Jan. 2020 Upcoming New Features in Prisma Cloud.   Prisma Cloud - TwistLock/PureSec Integration Dec. 2019  Prisma Cloud + TwistLock Integration   Alert Burndown Nov. 2019 Learning to manage alerts.   RQL Deep Dive Oct. 2019 Learning to use RQL     ... View more

The guides attached provide customized direction, advice, and recommendations by job function for implementing Prisma Cloud into operation in your organization.   Attachments below are as follows: Compliance Operationalization for Prisma Cloud  DevOps Operationalization for Prisma Cloud  SecOps Operationalization for Prisma Cloud  SOC-IR Operationalization for Prisma Cloud     ... View more

Features Introduced on October 2, 2019   New Features FEATURE DESCRIPTION Cloud Security Alliance (CSA) Compliance Standards Support Prisma Cloud adds support for Cloud Security Alliance: Cloud Controls Matrix (CCM) Version 3.0.1 for AWS, Azure and GCP. CSA is an organization that ensures security, trust and assurance to promote the use of best practices and regulations to effectively manage cloud-specific security controls. This standard includes 136 policies—136 for AWS, 41 for GCP, 30 for Azure.   Azure Key Vault Configuration Checks The Azure Key Vault configuration checks have been updated to retrieve more information so that you can define custom policy for Azure Key Vault certificates that check for: Maximum validity period Status of the reuse key on renewal Exportable private key Key type and key size   Support for Monitoring Resources on Azure Government. To help government agencies adopt a cloud-first approach and meet the security-related objectives, Prisma Cloud now supports Azure Government Cloud across the following Azure Government regions Azure Gov Virginia (US) Azure Gov Iowa (US) Azure Gov Texas (US) Azure Gov Arizona (US)   Temporary Alert Dismissal Instead of completely dismissing an alert, with this enhancement you can now snooze open alerts for a specified duration of time. On Alerts > Overview, you can use the Alert Status filter to find Snoozed alerts. After the specified time period, the alert is automatically reopened or resolved depending on whether or not the underlying violation is addressed.  Prisma Cloud Snooze Alerts   New Role—Account and Cloud Provisioning Admin. This new role combines the permissions available for the Cloud Admin and the Account Group Admin to enable administrators who are responsible for adding and managing designated accounts. With this role, in addition to being able to onboard cloud accounts, the administrator can access the dashboard, manage the security policies, investigate issues, view alerts and compliance details for the designated accounts only. View permissions associated with this role on Settings > Roles > +Add New. Prisma Cloud Admin View Permissions   Remediable Policies for Azure Security Center 15 Prisma Cloud default policies for Azure Security Center now include CLI for auto-remediation; only the Azure Security Center default policies that require a contact email address or phone number are not remediable. If Prisma Cloud is set up with the required read-write permissions, any alert rules that are enabled to auto-remediate and include these policies will automatically remediate new alerts that are generated after this Prisma Cloud update.  Prisma Cloud ASC Remediable Policies   New CLI Variables for Custom Policy When you create a policy you have two new CLI variables to enable auto-remediation. The GCP Zone ${gcpZoneId} and Azure Scope ${azureScope} variables enable you to specify the GCP zone or Azure scope to indicate the node within the Azure resource hierarchy in which the resource is deployed.  Available CLI Variables   API Ingestion Updates Prisma Cloud has added coverage for the API: GCP App Engine—gcloud-app-engine-firewall-rule AWS ActiveMQ—aws-mq-broker   For more information, see more release notes in Technical Documentation for Prisma Cloud. ... View more

Dear Customers,   In December 2019, we introduced host, container, and serverless security capabilities via the new Compute tab in Prisma Cloud. Today, we have two important updates to share with you.   1. The Compute tab upgrade option is now available! Since our December launch, we've published new maintenance releases for Prisma Cloud Compute and minor bug fixes. You can find a list of these updates along with our release notes here. We recommend upgrading to the newest release as soon as possible.   Here are some highlights about the new upgrade button that will be available soon: If your Compute Console version is out of date, you will see a banner at the top when you click on the Compute tab with instructions on how to upgrade. Prior to upgrading, please be aware that after upgrading your Console, you must also upgrade ALL deployed Defenders in order to match the version between Console and Defenders.   2. Licensing update Starting February 2020, every Prisma Cloud Host/VM Defender deployed in an AWS EC2, Azure VM, or GCP GCE will account for one additional Enterprise Edition workload license, in addition to the one license for Prisma Cloud. Refer to the pricing & edition guide for details.   Please reach out to your customer success team if you have any questions.    Thank you, The Prisma Cloud Team ... View more

Office Hours with Product: New Features in Prisma Cloud — host, containers & serverless security   Recording available from the Dec. 2019 customer webinar. Click here to view the recording. ... View more

We are excited to announce a web interface change that will present a navigation panel on the left side of the Prisma Cloud console.   Best Regards, The Prisma Cloud Team ... View more