{"id":2053,"date":"2020-04-02T13:22:57","date_gmt":"2020-04-02T09:22:57","guid":{"rendered":"https:\/\/techxmedia.com\/?p=2053"},"modified":"2025-04-17T23:59:21","modified_gmt":"2025-04-17T19:59:21","slug":"palo-alto-networks-announced-features-prisma-cloud","status":"publish","type":"post","link":"https:\/\/techxmedia.com\/en\/palo-alto-networks-announced-features-prisma-cloud\/","title":{"rendered":"New features for Prisma Cloud, Palo Alto Networks"},"content":{"rendered":"\n

Palo Alto Networks is pleased to announce the latest release of Prisma Cloud. This release offers DevOps and SecOps teams added visibility and security with advanced \u201cshift left\u201d capabilities and central CI\/CD policy management, along with several other host security features and architecture improvements. These enhancements empower organizations to implement cloud security across the full DevOps lifecycle on any cloud and any stack, and ultimately unite previously divided lines of business toward a common goal: implementation of a DevSecOps methodology to drive secure business innovation, scalability and growth.<\/p>\n\n\n\n

Cloud\nNative Adoption Presents Security Challenges<\/strong><\/h4>\n\n\n\n

Developer-led organizations are innovating\nwith greater speed and agility than ever before, focusing on investments in\nsoftware \u2013 both as a competency and as a competitive advantage.<\/p>\n\n\n\n

Enterprises continue to modernize\ntheir software development lifecycles <\/a>and embrace modern tools and\nprocesses, such as DevOps, containers and other cloud native architectures.\nThis growth is happening in conjunction with constantly increasing, diverse\ncloud footprints, ultimately multiplying the number of entities to protect,\nboth in production and across the application lifecycle. <\/p>\n\n\n\n

As organizations move to automate more of\ntheir cloud infrastructure build processes, they are adopting and creating new\ninfrastructure as code (IaC) templates. Without the help of the right security\ntools and processes, these infrastructure building blocks are being crafted\nwith rampant vulnerabilities. The Unit\n42 Cloud Threat Report, Spring 2020<\/a> found nearly 200,000 insecure\nIaC templates in use <\/strong>by organizations across the globe. These\nvulnerabilities create significant security risks.<\/p>\n\n\n\n

Disparate approaches to security that lack\nconsistency in controls across applications, data and infrastructure are not\neffective due to gaps in both visibility and protection. Further compounding\nthe challenge, there\u2019s abstraction layered upon abstraction, and security is no longer limited to security teams<\/a>.<\/p>\n\n\n\n

Where\nThere\u2019s a Will (and an Integrated CNSP), There\u2019s a Way<\/strong><\/h4>\n\n\n\n

The growth in both cloud native infrastructure\nand the ensuing security challenges is what led to Prisma Cloud and our aim to\ndefine what it means to be a comprehensive Cloud Native Security Platform\n(CNSP). Organizations want to ensure they can implement both a Cloud Security\nPosture Management (CSPM) solution and Cloud Workload Protection Platform\n(CWPP). With\nour release of Prisma Cloud in November<\/a>, we saw this convergence and\npioneered this approach with the industry\u2019s first Cloud Native Security\nPlatform.<\/p>\n\n\n\n

Security teams need to continuously monitor\ncloud configurations, while also protecting the continuum of options \u2013 VMs,\ncontainers and serverless \u2013 running on top of that infrastructure. A\nconsolidated platform helps organizations scale their security efforts, both\nacross the lifecycle and up and down the entire stack.<\/p>\n\n\n\n

The\nVoice of Our Customers<\/strong><\/h4>\n\n\n\n

\u201cAs we continue our Digital Transformation,\nadopting container-based application development strategies and transitioning\nmore and more of our on-premises applications to the public cloud, we needed a\nthird party security solution that could keep up. Prisma Cloud provided ABN\nAMRO with a piece of the puzzle for securing container workloads. Being able to\neffectively identify and remediate vulnerabilities and misconfigurations before\napplications are released into production empowers our security and developer\nteams to innovate quickly \u2013 with the confidence that our business is compliant\nand our customers\u2019 data is secure.\u201d<\/p>\n\n\n\n

  • Wiebe de Roos, CI\/CD Consultant & Engineer, ABN Amro<\/strong><\/li><\/ul>\n\n\n\n

    \u201cPrisma Cloud helps our\ncompany reach the concept of DevSecOps, where we assess security in every phase\nof development. If any vulnerability or flaw is discovered, we patch it before\ngoing into production. Prisma Cloud provides an incredible overall picture of\neverything developed in our environment. In a single pane of glass, we have\neverything under control.\u201d <\/p>\n\n\n\n

    The\nMost Comprehensive Cloud Native Security Platform \u2013 What\u2019s New?<\/strong><\/h4>\n\n\n\n

    With this latest release, Palo Alto Networks\nis both extending the Prisma Cloud platform and augmenting its industry-leading\ncloud native security capabilities. Following are the highlights:<\/p>\n\n\n\n

    Shift\nLeft Security<\/strong><\/h4>\n\n\n\n
    • IaC scanning: <\/strong>The ability to scan IaC templates with out-of-the-box and customizable policies for insecure configurations enables customers to deliver innovation to market faster, while having peace of mind that cloud-native applications and workloads are secure. A variety of shift-left plugins are available now to meet diverse customer environments and needs, including IDE (IntelliJ, VSCode), SCM (GitHub) and CI\/CD (AWS CodePipeline, Azure DevOps, CircleCI, GitLab, Jenkins). Additional plugins, including GitLab and BitBucket, will become available soon. <\/li>
    • Central CI\/CD policy management:<\/strong> Customers now have the ability to set policies for vulnerability and compliance governing CI and CD workflows directly from the centralized Prisma Cloud dashboard. Customers will also be able to view and author IaC policies within the Prisma Cloud policies dashboard. Out of the box IaC policies cover Center for Internet Security (CIS) standards for AWS, Azure and GCP. These updates help to further simplify cloud native security and consolidate cloud risk management.<\/li><\/ul>\n\n\n\n

      VM\nSecurity<\/strong><\/h4>\n\n\n\n
      • Amazon Machine Image (AMI) scanning:<\/strong> Organizations want to ensure that their images are vetted to meet vulnerability and compliance criteria and deployed from trusted sources. Vulnerability management capabilities in this latest release now include the ability to scan Amazon Machine Images (AMIs), similar to how Prisma already scans any container registry or serverless repository. This provides DevOps and security teams with added visibility into the security posture of their AMIs before they\u2019re ever deployed. <\/li><\/ul>\n\n\n\n

        Serverless\nSecurity <\/strong><\/h4>\n\n\n\n
        • Automatic serverless protection for AWS Lambda: <\/strong>Following our expanded serverless security capabilities with our integration of PureSec in November, Prisma Cloud customers are now able to automatically protect their AWS Lambda functions with one click, right from the console. This means that protecting serverless applications is easier, faster and does not require developers to manually install wrappers in their code. All existing serverless security capabilities \u2013 such as vulnerability management, behavioral protection and serverless cloud-native application firewall (CNAF) \u2013 are available for auto-protected functions. <\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"

          These enhancements empower organizations to implement cloud security across the full DevOps lifecycle on any cloud and any stack, and ultimately unite previously divided lines of business toward a common goal: implementation of a DevSecOps methodology to drive secure business innovation, scalability and growth.<\/p>\n","protected":false},"author":8,"featured_media":2055,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[154,9618],"tags":[520,1041,1040,523,1039,1042],"contributor":[],"class_list":["post-2053","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-computing","category-editors-pick","tag-cloud_security","tag-decops","tag-new_features","tag-palo_alto_networks","tag-prisma_cloud","tag-secops"],"featured_image_src":"https:\/\/techxmedia.com\/en\/wp-content\/uploads\/2020\/04\/Palo-Alto-Networks-e1585819312961.jpg","author_info":{"display_name":"Rabab","author_link":"https:\/\/techxmedia.com\/en\/author\/rabab\/"},"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t