Prisma Cloud (Annual Contract)

We are already using Prisma Cloud by Palo Alto Networks  and we're looking at using Red Hat. We have licenses for it as part of the Red Hat contract that we have.

We're looking to replace Prisma Cloud by Palo Alto Networks  with Red Hat ACS in some use cases. We are a telecom company, and we've been a customer.

We cannot answer questions about facing other issues with Prisma Cloud by Palo Alto Networks. What we know is that we don't use all the capabilities.

We are mainly using the image scanning in the repository. Prisma Cloud by Palo Alto Networks can also be used at runtime to detect security issues, but we don't use that part. We use the workload image scanning for cloud computing, not the VM.

We are only looking at Red Hat at the moment, and the focus is on Red Hat because we have the licenses. Engineering is thinking it's easy to integrate because we use many Red Hat products.

The opportunity in our company is good because we are already using Red Hat at different stages of cloud computing.

We are using Red Hat's operating systems, cloud products, and container security. For the private cloud, we're using the full OpenShift, OpenStack , and Linux Red Hat everywhere. We are using Red Hat Enterprise Linux .

On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight.

We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view.

We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts.

People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process.

We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

We don't know exactly how long we've been working with Prisma Cloud by Palo Alto Networks overall. We were not involved in the beginning, but it's probably something around three to four years.

Based on our experience, we would recommend Prisma Cloud by Palo Alto Networks to others. We would not recommend it to any specific types of companies.

Our knowledge is limited on this topic, but we don't believe there are types of companies to exclude. Our overall review rating for Prisma Cloud by Palo Alto Networks is eight out of ten.

Currently, we are using Prisma Cloud by Palo Alto Networks  for CSPM, CWP, and application security. In CSPM, we check for cloud security posture and overall assets that we have. We verify whether we meet the compliance standards based on company compliance requirements.

In CWP, we deploy a defender on containers that we use to monitor vulnerability and compliance issues. We have also started doing runtime protection, which checks for any runtime security threats such as crypto mining or port scanning.

In application security, we perform Terraform  scanning. We use containers with Prisma Cloud by Palo Alto Networks .

From the CSPM perspective, RQL in Prisma Cloud by Palo Alto Networks is a feature where we can conduct any kind of investigation and create our own custom policies. This is really helpful because in the cloud, there are millions of assets. With RQL, we can drill down to as fine a level as per our requirement.

For CWP, the runtime protection is the most valuable feature. Every tool does vulnerability monitoring through tools such as Qualys, but the additional feature we get here is runtime protection in CWP.

Prisma Cloud by Palo Alto Networks supports auto-remediation. Currently, it supports more than 100 policy auto-remediations, and we can even customize the auto-remediation policy.

From a security perspective in Prisma Cloud by Palo Alto Networks, if we integrate CI at the early stage, it gives all the vulnerability details so we can fix issues before going to production. The CI feature is helpful in application development from a security perspective.

Prisma Cloud by Palo Alto Networks is real-time in CWP. It fetches all the data within a second. For CSPM, it takes approximately 30 minutes to one hour to ingest the data. In CSPM, it scans the whole inventory on some time intervals. From my observations, it depends; sometimes five minutes, sometimes ten minutes, so approximately I consider it between 15 minutes to one hour.

There is a tool called PingSafe , which is a cloud security tool and a Sentinel  tool. It also does monitoring of CSPM. There I saw one feature called dummy payloads, in which we trigger the dummy payload, so it exactly gives the exploitable resources. That might be a feature that would be helpful if Prisma Cloud by Palo Alto Networks also had some kind of that feature.

It might be possible because currently, I think Prisma Cloud is migrating to Codex Cloud. They are changing their platform from Prisma Cloud to Codex Cloud. There might be a chance that they will introduce all these new features in Codex Cloud. From next year, Prisma Cloud will be decommissioned and it will be called Codex Cloud.

I have been working with Prisma Cloud by Palo Alto Networks for more than three years.

Prisma Cloud by Palo Alto Networks has more support than other tools at this time. This helps Prisma Cloud by Palo Alto Networks capture the market overall. In terms of features and models, a tool can have some issues and bugs. To fix those issues and resolve queries, any tool requires a strong support system and background technical support. Prisma Cloud by Palo Alto Networks has a strong background technical support system. Anywhere we raise a tech case, they revert back within an hour. This helps them capture the market in terms of support.

For technical support in Prisma Cloud by Palo Alto Networks, I rate it a nine out of ten.

The initial setup for Prisma Cloud by Palo Alto Networks is a very simple feature. It depends on the different types of cloud environments, but it is simple.

I am still working with Prisma Cloud by Palo Alto Networks. I will definitely recommend this tool to others. I give this review a rating of nine out of ten.