STIGQter: STIG Summary: Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Apr 2026:

Prisma Cloud Compute Cloud Native Network Firewall (CNNF) automatically monitors layer 4 (TCP) intercontainer communications. Enforcement policies must be created.

DISA Rule

SV-253526r1137642_rule

Vulnerability Number

V-253526

Group Title

SRG-APP-000039-CTR-000110

Rule Version

CNTR-PC-000140

Severity

CAT I

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.
• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Navigate to Prisma Cloud Compute Console's >> Radars >> Settings.

Set Container network monitoring to "enabled".

Set Host network monitoring to "enabled".

Check Contents

Navigate to Prisma Cloud Compute Console's >> Radars >> Settings.

If Container network monitoring is disabled, this is a finding.

If Host network monitoring is disabled, this is a finding.

Vulnerability Number

V-253526

Documentable

False

Rule Version

CNTR-PC-000140

Severity Override Guidance

Navigate to Prisma Cloud Compute Console's >> Radars >> Settings.

If Container network monitoring is disabled, this is a finding.

If Host network monitoring is disabled, this is a finding.

Check Content Reference

M

Target Key

5473