How to enable custom compliance check on Host Defender
1549
Created On 11/07/22 02:22 AM - Last Modified 05/15/24 20:18 PM
Objective
This article is to guide how to enable custom compliance check on Host Defender.
Environment
- Prisma Cloud Compute
- Host Defender
Procedure
As per Custom compliance checks , there are 3 + 4 steps as below:
- Enabling custom compliance checks for hosts
- Go to Manage > Defenders > Advanced Settings
- Set Custom Compliance Checks for hosts to enabled.
- Deploy Defenders to your environment. Or if already deployed, redeploy your Defenders.
- Creating a new custom check
- Open Console
- Write a new custom check Defend > Compliance > Custom > Add Check
- Update the compliance policy to run your check.
- Validate your setup by reviewing the compliance reports under Monitor > Compliance .
- When redeploying the Defenders, we must fully decommission the Defenders, and deploy it again.
- How to decommission Defenders
- For daemon set re-deployment, make sure the daemonset is fully removed with below commands, and then deploy it again:
kubectl delete -f <daemonset deployment filename>.yaml
- Simply deleting the pods or restart the daemonset is not considered as redeployment.