STIGQter: STIG Summary: Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Apr 2026:

Prisma Cloud Compute Defender must be deployed to containerization nodes that are to be monitored.

DISA Rule

SV-253527r960897_rule

Vulnerability Number

V-253527

Group Title

SRG-APP-000097-CTR-000180

Rule Version

CNTR-PC-000240

Severity

CAT II

CCI(s)

• CCI-000132 - Ensure that audit records containing information that establishes where the event occurred.
• CCI-001487 - Ensure that audit records containing information that establishes the identity of any individuals, subjects, or objects/entities associated with the event.

Weight

10

Fix Recommendation

Navigate to Prisma Cloud Compute Console's >> Manage >> Defenders >> Manage tab.

Deploy Defender to containerization node:
- Select the method of Defender deployment.
- Configure the Defender policy.

Check Contents

Navigate to Prisma Cloud Compute Console's >> Manage >> Defenders >> Manage tab.

Verify Prisma Cloud Compute Defenders have been deployed to all container runtime nodes to be monitored.

Review the list of deployed Defenders. If a Defender is missing, this is a finding.

Vulnerability Number

V-253527

Documentable

False

Rule Version

CNTR-PC-000240

Severity Override Guidance

Navigate to Prisma Cloud Compute Console's >> Manage >> Defenders >> Manage tab.

Verify Prisma Cloud Compute Defenders have been deployed to all container runtime nodes to be monitored.

Review the list of deployed Defenders. If a Defender is missing, this is a finding.

Check Content Reference

M

Target Key

5473