Introducing
Cortex Cloud

Prisma Cloud offers end-to-end visibility of cloud networks across Amazon Web Services (AWS), Microsoft Azure and Google Compute Platform (GCP) deployments.

• Network configuration and asset visibility

  Know about the assets and network configurations deployed across multicloud environments.

• Configuration change monitoring

  Unlike scanning technologies that take infrequent snapshots, Prisma Cloud continuously monitors environments, enabling security teams to track network misconfigurations, when they happened and who changed them.

• Flow mapping

  Visualize any network communication across your clouds. Prisma Cloud collects cloud provider network flow logs and builds a map of communications, including traffic to and from untrusted sources or malicious IP addresses.

• Remediation guidance

  Reduce cross-collaboration friction and increase remediation efficiency. Prisma Cloud delivers step-by-step remediation instructions, providing context for the teams who are responsible for network misconfigurations.

Prisma Cloud employs advanced ML to monitor the normal network behavior of each customer’s cloud environment and then detect network anomalies and zero-day attacks effectively with minimal false positives. With Prisma Cloud, you can detect network anomalies without changing your network infrastructure.

• Port scan and sweep detection

  Detect common reconnaissance techniques per MITRE ATT&CK® Cloud Matrix to facilitate remediation activities, such as closing ports opened unintentionally.

• Unusual port and server activity detection

  Spot unusual activities and detect evasive tactics against critical assets, such as PII, financial information and others in preparation for data exfiltration.

• DNS threat detection

  Identify DNS-based threats, such as domain generation algorithm and cryptomining – all without changing your DNS infrastructure.

• Network threat investigation

  View network flows to and from untrusted sources in a graph. Prisma Cloud incorporates threat intelligence, ensuring security teams know which external IPs are known to be malicious.