STIGQter: STIG Summary: Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Apr 2026:

Prisma Cloud Compute Defender must reestablish communication to the Console via mutual TLS v1.2 WebSocket session.

DISA Rule

SV-253545r986174_rule

Vulnerability Number

V-253545

Group Title

SRG-APP-000390-CTR-000930

Rule Version

CNTR-PC-001250

Severity

CAT II

CCI(s)

• CCI-002036 - Defines the circumstances or situations under which users will be required to reauthenticate.

Weight

10

Fix Recommendation

Navigate to Prisma Cloud Compute's Manage >> Defenders.

Select the "Manage" tab. Select the "Defenders" tab.

Click "Advanced Settings".

Set the "Automatically remove disconnected Defenders after (days)" value to the organization's defined period.

Check Contents

Navigate to Prisma Cloud Compute Console's >> Manage >> Defenders.

Select the "Manage" tab. Select the "Defenders" tab.

Click "Advanced Settings".

If "Automatically remove disconnected Defenders after (days)" is not configured to the organization's policies, this is a finding.

Vulnerability Number

V-253545

Documentable

False

Rule Version

CNTR-PC-001250

Severity Override Guidance

Navigate to Prisma Cloud Compute Console's >> Manage >> Defenders.

Select the "Manage" tab. Select the "Defenders" tab.

Click "Advanced Settings".

If "Automatically remove disconnected Defenders after (days)" is not configured to the organization's policies, this is a finding.

Check Content Reference

M

Target Key

5473