Close- Welcome
-
Install
- Install
- Getting started
- System requirements
- Prisma Cloud container images
- Onebox
- Kubernetes
- OpenShift 4
- OpenShift 3.11
- VMware Tanzu Kubernetes Grid
- Docker Swarm
- Amazon ECS
- Windows
- Defender types
-
Install Defender
- Install Defender
- Single Container Defender
- Cluster Container Defender
- App Embedded Defender
- App Embedded Defender for Fargate
- VMware Tanzu Application Service Defender
- Serverless Defender (auto-protect)
- Serverless Defender
- Serverless Defender (Lambda layer)
- Host Defender
- Deploy Defender from GCP Marketplace
- Decommission single Container Defender
- Upgrade
- Technology overviews
-
Configure
- Configure
- Rule ordering and pattern matching
- Disaster recovery
- Custom feeds
- Proxy configuration
- Custom certs for Console access
- Configure scan intervals
- User certificate validity period
- Enable HTTP access to Console
- Set different paths for Console and Defender (with daemon sets)
- Authenticate to Console with certificates
- Customize terminal output
- Collections
- Tags
- Logon Settings
- Reconfigure Prisma Cloud
- Subject Alternative Names
-
Authentication
- Authentication
- Log into Console
- Active Directory
- OpenLDAP
- OpenID Connect
- Okta (SAML 2.0)
- Google G Suite (SAML 2.0)
- Azure Active Directory (SAML 2.0)
- PingFederate (SAML 2.0)
- Active Directory Federation Services (SAML 2.0)
- GitHub (OAuth 2.0)
- OpenShift (OAuth 2.0)
- Active Directory Non-default UPN suffixes
- Compute user roles
- Assign roles
- Use custom certificates for authorization
- Credentials store
-
Vulnerability management
- Vulnerability management
- Vulnerability Explorer
- Vulnerability management rules
- Search CVEs
- Scan reports
- Customize image scanning
- Registry scanning
- Configuring registry scans
- Base images
- VM image scanning
- Code repository scanning
- Malware scanning
- Risk trees
- Detect vulnerabilities in unpackaged software
- CVSS scoring
- Google Cloud Container Builder
- Windows image scanning
- Serverless function scanning
- VMware Tanzu blobstore scanning
- Compliance
- Runtime defense
- Access control
- Continuous integration
- Web-Application and API Security (WAAS)
- Firewalls
- Secrets
- Alerts
- Audit
- Tools
- Deployment patterns
- API
-
How-to guides
- Howto
- Configure an ECS load balancer
- Use Nginx Ingress Controller
- Configure the load balancer type for AWS EKS
- Deploy Defenders External to an OpenShift cluster
- Configure Console's listening ports
- Provision tenant projects OpenShift
- Setting up Istio
- Disable automatic learning
- Rolling Defender upgrades
- Review debug logs