About Prisma Cloud

A knowledge base article about About Prisma Cloud provided by the UC Berkeley IT Service Hub - Knowledge Portal

Overview

Prisma Cloud is Palo Alto Networks' cloud-native security solution that provides Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) components. Find out more on the Prisma Cloud service offering page.

This service works with the bCloud Amazon Web Services (AWS), Microsoft Azure (Azure), and Google Cloud Platform (GCP) central payer accounts.
The service will be actively monitored by ISO, who will notify admins if an issue is detected.
Extends intrusion detection and vulnerability scanning/monitoring into the cloud.
Helps meet campus MSSEI and MSSND requirements, for cloud accounts in the central payer account.
- MSSEI 4.3 Inventory
- MSSEI 4.4 Registration
- MSSEI 9.1 General Monitoring and Detection
- MSSEI 9.2 Continuous Vulnerability Assessment and Remediation
- MSSEI 9.3 Privileged Scan (for cloud account configuration only)
- MSSEI 10.1 Security audit logging (for cloud activity)
Increases your cloud security posture and reduces campus risk.
Facilitates moving high-risk data into the cloud (P3 and P4 compliance).
Provides Tenant Admin instances for all bCloud account admins (providing admin access to the Prisma tool for their accounts)

The MSSEI and MSSND features are available automatically for the public cloud resources and environments. Additional configurations or agents may be necessary to extend these features into virtual machines and applications.