We just finished rolling out Prisma Cloud across our user base. The goal was better visibility and posture management, but we hit a few snags right out of the gate.
The biggest issue was alert fatigue. We got flooded with compliance alerts for low-severity items that weren't relevant to our specific environment. We had to spend the first week tuning policies and creating custom compliance standards. Also, some of our legacy apps had weird network behavior that triggered the "suspicious traffic" alerts constantly. We're still fine-tuning the anomaly detection.
On the plus side, the asset inventory and vulnerability reporting is fantastic. It helped us clean up a lot of unused resources. Curious if others saw similar issues with alert noise during their rollout? What was the most useful report or feature you found after getting past the initial setup pain?