Strata Cloud Manager

Review the Setup Prerequisites for Enterprise DLP and enable the required ports, full qualified domain names (FQDN), and IP addresses on your network.
You must allow all IP addresses for Evidence Storage in the region where the SFTP server is deployed. This is gives
Enterprise DLP
access to your network in order to write to your SFTP server.
You must allow the IP or FQDN of the SFTP server on your network. The SFTP server must be accessible on your network so
Enterprise DLP
can successfully write to your SFTP server.
Log in to
Strata Cloud Manager
.
Access to evidence storage settings and files on
Strata Cloud Manager
is allowed only for an account administrator or app administrator role with
Enterprise DLP
read and write privileges. This is to ensure that only the appropriate users have access to report data and evidence.
Select
Manage
Configuration
Data Loss Prevention
Settings
Sensitive Data
and select
Configure Bucket
SFTP
as the Public Cloud Storage Bucket.
Review the
Instructions - SFTP
and click
Next
.
Input Bucket Details
to configure the SFTP server connection settings.
Enter the

Username

of the SFTP server user used for secure file uploads.

The user is required to have read and write access to the SFTP server.

Enter the

Private Key

for the SFTP server.

This is required to authenticate the SSH connection to the SFTP server. The

Private Key

must include both the

BEGIN RSA PRIVATE KEY

and

END RSA PRIVATE KEY

prompts.

(

Optional

) Enter the public

PGP Key

to sign and encrypt files uploaded to the SFTP server.

Pretty Good Privacy (PGP) is an encryption program providing privacy and authentication for data communication, and used for signing, encrypting, and decrypting files. The

PGP Key

must include both the

BEGIN RSA PRIVATE KEY

and

END RSA PRIVATE KEY

prompts.



Enter the

Hostname

of the SFTP server.

The

Hostname

can be a Fully Qualified Domain Name (FQDN) or an IPv4 address.

If you enter a FQDN, the FQDN must be publicly resolvable. If you enter an IPv4 address, the IP address must be public.

Enterprise DLP

cannot connect to a private FQDN or IPv4 address.

(

Optional

) Enter the

Folder Path

for uploaded files to specify the target location where files are uploaded to on the SFTP server.

If no

Folder Path

is specified, the DLP cloud service creates the default

reportId

folder at the top-most folder the

Username

has read and write access to. The folder path for uploaded files depends on whether a

Folder Path

is specified.

Folder Path Specified
—<
folder path
>
/reportId/
<
file name
>
Folder Path Not Specified
—
/reportId/
<
file name
>

Enter the

Port

number through which files are uploaded to the SFTP server.

Palo Alto Networks recommends using Port 22 for file uploads to your SFTP server. For uncommon ports,

Enterprise DLP

needs to open the egress port for connection and upload.


Connect
to the SFTP server.
As part of the setup process, a file called
Palo_Alto_Networks_DLP_Connection_Test.txt
is uploaded to the target
Folder Path
on your SFTP server. Connectivity between the DLP cloud service and your SFTP server is successful if DLP cloud service successfully uploads the test file.
The
Connection Status
displays whether the initial connection test was successful. Continue to the next step when the
Bucket connected successfully
.
Click
Previous
if the connection isn’t successful to modify the SFTP server and connection settings as needed.

Save
the SFTP server connectivity settings.
Download Files for Evidence Analysis.