Prisma Cloud Security

Overview

Prisma Cloud is Palo Alto Networks' cloud-native security solution that provides Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) components. These will give us new abilities to help secure Cloud environments. This is considered a self-service cloud offering that can be used to monitor cloud environments to inventory and track deployments, and any configuration mistakes, and provide additional insight into attacker activity. It also supplies a single interface to evaluate the cloud environments, including multi- and hybrid-cloud configurations, against many established policies and best practices. It addresses many of the cloud security use cases a customer might have.

The Benefits

• This service works with the bCloud Amazon Web Services (AWS), Microsoft Azure (Azure), and Google Cloud Platform (GCP) central payer accounts.

• The service will be actively monitored by ISO, who will notify admins if an issue is detected.

• Extends intrusion detection and vulnerability scanning/monitoring into the cloud.

• Helps meet campus MSSEI and MSSND requirements, for cloud accounts in the central payer account.

  • MSSEI 4.3 Inventory

  • MSSEI 4.4 Registration

  • MSSEI 9.1 General Monitoring and Detection

  • MSSEI 9.2 Continuous Vulnerability Assessment and Remediation

  • MSSEI 9.3 Privileged Scan (for cloud account configuration only)

  • MSSEI 10.1 Security audit logging (for cloud activity)

• Increases your cloud security posture and reduces campus risk.

• Facilitates moving high-risk data into the cloud (P3 and P4 compliance).

• Provides Tenant Admin instances for all bCloud account admins (providing admin access to the Prisma tool for their accounts)

The MSSEI and MSSND features are available automatically for the public cloud resources and environments. Additional configurations or agents may be necessary to extend these features into virtual machines and applications.

Service Details