Prerequisite FQDNs for Exact Data Matching (EDM)
Focus
Focus
Enterprise DLP

Prerequisite FQDNs for Exact Data Matching (EDM)

Table of Contents


Fully Qualified Domain Names (FQDN) required to upload data sets for Exact Data Matching (EDM).
To successfully create and upload data sets to Enterprise Data Loss Prevention (E-DLP) and use Exact Data Matching (EDM), you must allow access to the following FQDNs on your network.
The EDM CLI App first hashes the data set using the SHA256 hash function when you initiate an EDM data set upload. The EDM CLI App then encrypts the EDM data set using AES Symmetric encryption before beginning the EDM data set upload to the Enterprise DLP EDM data set storage bucket. The raw data in your EDM data sets never leave your organization's network, and Enterprise DLP does not store or have access to the raw EDM data set data. Enterprise DLP stores only hashed and encrypted EDM data set data in the EDM data set storage bucket.
  • https://api.dlp.paloaltonetworks.com
  • https://auth.apps.paloaltonetworks.com
  • https://prod-edm-dataset-bucket.s3.us-west-2.amazonaws.com