STIGQter: STIG Summary: Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Apr 2026:

Prisma Cloud Compute local accounts must enforce strong password requirements.

DISA Rule

SV-253538r1015786_rule

Vulnerability Number

V-253538

Group Title

SRG-APP-000164-CTR-000400

Rule Version

CNTR-PC-000640

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.
• CCI-001953 - Accepts Personal Identity Verification-compliant credentials.
• CCI-002007 - Prohibit the use of cached authenticators after an organization-defined time period.

Weight

10

Fix Recommendation

Navigate to Prisma Cloud Compute Console's >> Manage >> Authentication >>
Logon tab.

- Set "Token validity period" to 15 or less.
- Set "Enable context sensitive help and single sign on to the Prisma Cloud Support site" to "off".
- Set "Disable basic authentication for the API" to "on".
- Set "Require strong passwords for local accounts" to "on".
- Set "Require strict certificate validation in Defender installation links" to "off".
- Click "Save" and "Restart".

Check Contents

Navigate to Prisma Cloud Compute Console's >> Manage >> Authentication >> Logon tab.

- If "Token validity period" is greater than 15, this is a finding.
- If "Enable context sensitive help and single sign on to the Prisma Cloud Support site" is set to "on", this is a finding.
- If "Disable basic authentication for the API" is set to "off", this is a finding.
- If "Require strong passwords for local accounts" is set to "off", this is a finding.
- If "Require strict certificate validation in Defender installation links" is set to "on", this is a finding.

Vulnerability Number

V-253538

Documentable

False

Rule Version

CNTR-PC-000640

Severity Override Guidance

Navigate to Prisma Cloud Compute Console's >> Manage >> Authentication >> Logon tab.

- If "Token validity period" is greater than 15, this is a finding.
- If "Enable context sensitive help and single sign on to the Prisma Cloud Support site" is set to "on", this is a finding.
- If "Disable basic authentication for the API" is set to "off", this is a finding.
- If "Require strong passwords for local accounts" is set to "off", this is a finding.
- If "Require strict certificate validation in Defender installation links" is set to "on", this is a finding.

Check Content Reference

M

Target Key

5473