Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide

The Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide (V2 R3) has 31 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

31STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Wed Apr 01 2026

Prisma Cloud Compute must be configured to scan images that have not been instantiated as containers.

Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide

Assessment Title

Rule Text

Prisma Cloud Compute must be configured to scan images that have not been instantiated as containers.

Description

Discussion Text

Prisma Cloud Compute ships with "only scan images with running containers" set to "on". To meet the requirements, "only scan images with running containers" must be set to "off" to disable or remove components that are not required.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-253544

Rule

SV-253544r961473_rule

Severity

high

Rule Version

CNTR-PC-001220

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Navigate to Prisma Cloud Compute Console's >> Manage >> System >> Scan tab. 

Verify that for Running images, For Running images, "Only scan images with running containers" is set to "Off".

If "Only scan images with running containers" is set to "On", this is a finding.

Implementation Procedure

Fix Text

Navigate to Prisma Cloud Compute Console's >> Manage >> System >> Scan tab. 

For Running images:
- Set "Only scan images with running containers" = "Off".
- Click "Save".

STIG check 23 of 31 in the Palo Alto Networks Prisma Cloud Compute STIG checklist

← Previous · V-253543The configuration integrity of the container platform must be ensured and vulnerabilities policies must be configured.Next · V-253545 →Prisma Cloud Compute Defender must reestablish communication to the Console via mutual TLS v1.2 WebSocket session.