Palo Alto Networks Prisma Cloud Workload Protection

Prisma Cloud Workload Protection (CWPP) provides protection across hosts, containers, and serverless deployments in any cloud, throughout the application lifecycle.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users
• Vulnerabilities
• Software
• SaaS Applications
• Containers

Parameters

1. Host Name or IP Address (required) - The full URL of the CWPP server.

2. API Version (required, default: 32.07) - Enter the CWPP version that you're running.
   To find your version, see How to Find Your Version.

3. Prisma Cloud Access Key ID and Prisma Cloud Secret Key (required) - The credentials for a user account that has the permissions to fetch assets.

4. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

5. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

6. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

7. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fetch containers as Devices - Select whether to fetch software containers as devices.
2. Fill vulnerabilities for containers - Select whether to include vulnerability data for container devices.
3. Fetch Container Image Information - Select whether to fetch image information for containers.
4. Fetch Container Images as Devices - Select this option to create devices from images.

APIs

Axonius uses the CWPP API.

Supported From Version

Supported from Axonius version 4.6