Skip to content
ATO Pathways
  Log In

Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Prisma Cloud Compute must be configured with unique user accounts.

    <VulnDiscussion>Sharing accounts, such as group accounts, reduces the accountability and integrity of Prisma Cloud Compute.</VulnDiscussio...
    Rule Medium Severity
    Show

  • SRG-APP-000164-CTR-000400

    <GroupDescription></GroupDescription>
    Group
    Show

  • All Prisma Cloud Compute users must have a unique, individual account.

    &lt;VulnDiscussion&gt;Prisma Cloud Compute does not have a default account. During installation, the installer creates an administrator. This accou...
    Rule Medium Severity
    Show

  • SRG-APP-000148-CTR-000345

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prisma Cloud Compute must be configured to scan images that have not been instantiated as containers.

    &lt;VulnDiscussion&gt;Prisma Cloud Compute ships with "only scan images with running containers" set to "on". To meet the requirements, "only scan ...
    Rule High Severity
    Show

  • SRG-APP-000023-CTR-000055

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000390-CTR-000930

    <GroupDescription></GroupDescription>
    Group
    Show

  • Configuration of Prisma Cloud Compute must be continuously verified.

    &lt;VulnDiscussion&gt;Prisma Cloud Compute's configuration of Defender deployment must be monitored to ensure monitoring and protection of the envi...
    Rule Medium Severity
    Show

  • SRG-APP-000610-CTR-001385

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prisma Cloud Compute Console must run as nonroot user (uid 2674).

    &lt;VulnDiscussion&gt;Containers not requiring root-level permissions must run as a unique user account. To ensure accountability and prevent unaut...
    Rule Medium Severity
    Show

  • SRG-APP-000153-CTR-000375

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prisma Cloud Compute must be configured for forensic data collection.

    &lt;VulnDiscussion&gt;Prisma Cloud Compute correlates raw audit data to actionable security intelligence, enabling a more rapid and effective respo...
    Rule Medium Severity
    Show

  • SRG-APP-000101-CTR-000205

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000033-CTR-000100

    <GroupDescription></GroupDescription>
    Group
    Show

  • Users requiring access to Prisma Cloud Compute's Credential Store must be assigned and accessed by the appropriate role holders.

    &lt;VulnDiscussion&gt;The container platform keystore is used to store credentials that are used to build a trust between the container platform an...
    Rule Medium Severity
    Show

  • SRG-APP-000038-CTR-000105

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prisma Cloud Compute Collections must be used to partition views and enforce organizational-defined need-to-know access.

    &lt;VulnDiscussion&gt;Prisma Cloud Compute Collections are used to scope rules to target specific resources in an environment, partition views, and...
    Rule Medium Severity
    Show

  • SRG-APP-000039-CTR-000110

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prisma Cloud Compute Cloud Native Network Firewall (CNNF) automatically monitors layer 4 (TCP) intercontainer communications. Enforcement policies must be created.

    &lt;VulnDiscussion&gt;Network segmentation and compartmentalization are important parts of a comprehensive defense-in-depth strategy. CNNF works as...
    Rule High Severity
    Show

  • SRG-APP-000097-CTR-000180

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules