Uninstall the Enterprise DLP Plugin

1. Log in to the Panorama web interface.
2. Select PoliciesSecurity and remove all Enterprise DLP data filtering profiles from your Security policy rules.

   This step is required to successfully uninstall the Enterprise DLP plugin.

3. Commit and push your configuration changes to your managed devices using Enterprise DLP.

   The Commit and Push command isn’t recommended for Enterprise DLP configuration changes. Using the Commit and Push command requires the additional and unnecessary overhead of manually selecting the impacted templates and managed devices in the Push Scope Selection.

   1. Select CommitCommit to Panorama and Commit.
   2. Select CommitPush to Devices and Edit Selections.
   3. Select Device Groups and Include Device and Network Templates.
   4. Click OK.
   5. Push your configuration changes to your managed devices that are using Enterprise DLP.
4. In the Panorama web interface, select PanoramaPlugins and Uninstall the Enterprise DLP plugin.

   (HA) Repeat this step on both Panorama HA peers if Panorama is in an HA configuration.
5. Commit and push the new configuration to your managed devices to uninstall the Enterprise DLP plugin.

   The Commit and Push command isn’t recommended for Enterprise DLP configuration changes. Using the Commit and Push command requires the additional and unnecessary overhead of manually selecting the impacted templates and managed devices in the Push Scope Selection.

   • Full configuration push from Panorama
     1. Select CommitCommit to Panorama and Commit.
     2. Select CommitPush to Devices and Edit Selections.
     3. Select Device Groups and Include Device and Network Templates.
     4. Click OK.
     5. Push your configuration changes to your managed devices that are using Enterprise DLP.
   • Partial configuration push from Panorama
     You must always include the temporary __dlp administrator when performing a partial configuration push. This is required to keep Panorama and Strata Cloud Manager in sync.

     For example, if admin is logged in and making changes, they must select both admin and __dlp in the partial commit and push.
     1. Select CommitCommit to Panorama.
     2. Select Commit Changes Made By and then click the current Panorama admin user to select additional admins to include in the partial commit.
        Select your logged-in admin user, the __dlp user, and any other admins whose changes to include. Click OK to continue.

     3. Commit.
     4. Select CommitPush to Devices.
     5. Select Push Changes Made By and then click the current Panorama admin user to select additional admins to include in the partial push.
        Select your logged-in admin user, the __dlp user, and any other admins whose changes to include. Click OK to continue.

     6. Select Device Groups and Include Device and Network Templates.
     7. Click OK.
     8. Push your configuration changes to your managed devices that are using Enterprise DLP.