Synchronize DLP Rules With Child Tenants in Strata Multitenant Cloud Manager

1. Log in to Strata Multitenant Cloud Manager.
2. Navigate to the root-level parent tenant.
3. Navigate to the DLP rules you want to synchronize.

   • ConfigurationData Loss PreventionDLP Rules
   • ConfigurationData Loss PreventionEndpoint DLP
4. From the list of rules, select one or more rules.
5. Click Push Config.

   The Multi Tenant Config Push flyout dialog lists all child tenants of the root-level parent tenant. Tenants without licensed instances of Enterprise DLP are grayed out, and you can't select them.
6. In the Multi Tenant Config Push flyout dialog, complete the following actions:

   1. (Optional) Enter a Description for the push.

      This description appears in the audit log to help you and other administrators identify the purpose of the push.
   2. Select the tenants to which you want to synchronize the DLP rule configuration.
   3. Click Push Config.

   Enterprise DLP pushes the selected DLP rules to the selected child tenants. If the child tenants don't already have the data profiles or detection methods that a rule requires, Enterprise DLP also pushes those objects. The configuration push overrides any configuration conflicts on the child tenants.

   For exact data matching (EDM) datasets, Enterprise DLP pushes only the metadata, not the dataset, because the dataset is encrypted using a key that is unique to the tenant. The audit log shows that the configuration push was successful even though Enterprise DLP pushed only the metadata.
7. Check the Config Push Logs to verify that Enterprise DLP pushed the DLP rule and its required objects to all selected child tenants.

   A configuration push can fail for individual child tenants, for example because of offline devices or licensing gaps.

   1. Select Audit Logs.
   2. On the Logs page, select Config Push Logs.
   3. Locate your configuration push request and check whether its status is Successful or Failed.
   4. If the status is Failed, click the Request ID for more information.
   5. In the flyout dialog, select Failed and view the Details.