Preparing for the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute

Release version: Zurich

Updated July 31, 2025

2 minutes to read

Summarize

Summarized using AI

Summary of Preparing for the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute

This guide helps ServiceNow customers prepare for integrating Vulnerability Response with Palo Alto Networks Prisma Cloud Compute on the ServiceNow AI Platform®. The integration enables importing and managing container vulnerability data efficiently within ServiceNow.

Show full answer Show less

Preparation Steps

Gather Integration Credentials: Ensure you have the API base URL, username, and password with permissions to monitor container images.
Verify Vulnerability Response Application: Confirm that Vulnerability Response version 16.1 or later is installed and activated before installing the Prisma Cloud Compute integration.
Download and Entitlements: Obtain the necessary entitlements and download the integration app from your ServiceNow instance.
Estimate Vulnerable Items: Assess the expected volume of vulnerable items to import and verify your instance can handle this load to avoid performance issues.
User and Group Setup: Confirm the availability or create necessary user groups and roles:
- Admin: Manages integration installation and configuration.
- Container Vulnerability Admin: Full access to Container Vulnerability Response (CVR) configuration and records.
- Vulnerability Response Group: Read access to vulnerabilities.
- Container Remediation Owner Group: Responsible for remediating assigned container vulnerabilities.
- Vulnerability Analyst: Monitors remediation processes.
Install Supporting Integrations: Install the Vulnerability Response integration with the National Vulnerability Database (NVD) and run the related API to enrich vulnerability data.

Key Outcomes

After completing these preparations, your ServiceNow instance will be ready to seamlessly integrate with Palo Alto Networks Prisma Cloud Compute. This setup ensures secure, efficient import and management of container vulnerability data, enabling your teams to monitor, analyze, and remediate vulnerabilities effectively within the ServiceNow platform.

You can prepare for the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute by performing setup tasks.

Before you begin

To install and configure the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute application, you may print the following checklist. Verify the items listed are completed before you install the application and import the vulnerability data into your ServiceNow AI Platform® instance.

Table 1. Integration preparation checklist
Task	Description
	Verify that you have the following sets of information: API base URL Username and Password. These credentials are used to pull the vulnerabilities from the Prisma Cloud Compute integration. For more information, see https://pan.dev/compute/api/ Note: Mid Server is optional. The user credential used for Prisma Cloud Compute integration needs permission to monitor the images. See the following code: `{"permission":"monitorImages","saas":true,"self-hosted":true}`
	If not already installed and activated, install the Vulnerability Response application before you install the third-party application. For more information about installing and activating the Vulnerability Response application, see Install Vulnerability Response. This integration requires version 16.1 of Vulnerability Response or later.
	Get entitlements and download the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute application on your ServiceNow AI Platform® instance.
	Estimate the number of vulnerable items that you expect to import. Verify that your instance can accept the number of vulnerable items that you expect to import. An undersized instance can lead to long load times. If you don't know the size of your instance, or if you need assistance, contact ServiceNow Technical Support.
	Verify that you have the following groups or users to manage the integrations and to remediate the vulnerable items: admin Install the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute application. If not assigned, the admin assigns the container vulnerability admin (sn_vul_container.vulnerability_admin) and other roles. sn_vul_container.vulnerability_admin Completes the configuration of the Prisma Cloud Compute integration. This role has complete access to the Container Vulnerability Response (CVR) application and its records. This admin configures integrations and rules in Container Vulnerability Response. Vulnerability Response Group By default, the Vulnerability Response group is available. Users assigned to the Vulnerability Response group inherit the sn_vul.read_all, sn_vul_container.read_all. Container Remediation Owner Group By default, the Container Remediation Owner group is available. Users assigned to this group inherit the sn_vul_container.remediation_owner. The Container Remediation Owner remediates container vulnerabilities assigned to them or to a group they belong to. Vulnerability Analyst Users assigned to Container Vulnerability Analyst group inherit sn_vul.vulnerability_analyst. The Vulnerability Analyst monitors remediation of all vulnerable items. If not already created, you may prefer to create additional groups and add users with the User Administration module in your instance. For more information, see Create a user group.
	Install the Vulnerability Response integration with NVD and run the NIST National Vulnerability Database Integration - API (CVE only).

You are ready to Configure the Vulnerability Response Integration with Palo Alto Networks Prisma Cloud Compute application.