Modify a DLP Rule on

Strata Cloud Manager

Log in to
Strata Cloud Manager
.
Create a data profile.
Select
Manage
Configuration
Data Loss Prevention
DLP Rules
and in the Actions column,
Edit
the DLP rule.
The DLP rule has an identical name as the data profile from which it was automatically created.
(
Optional
) Enter a Description for the DLP rule.
Modify the DLP rule Match Criteria.
Specify the type of traffic the DLP rule applies to.
You can enable either or both match criteria traffic types for a DLP rule.
File Based Match Criteria
—DLP rule match criteria is applied to file-based based traffic.
Non-File Based Match Criteria
—DLP rule match criteria is applied to non-file formats that use collaboration and cloud applications, web forms, and social media.
(
Prisma Access
5.1 and later
) Select the
File Mode
to explicitly include or exclude specific file types.
A DLP Rule supports only one type of file mode. A DLP Rule can't be configured to both include and exclude specific file types.
Include
—
Enterprise DLP
only inspects the selected
File Type
. All other file types are ignored and not sent to
Enterprise DLP
for inspection and verdict rendering.
Exclude
—Selected
File Type
are ignored and are not sent to
Enterprise DLP
for inspection and verdict rendering. All other file types are forwarded to
Enterprise DLP
.
Specify a
File Type
.
The default file type is
Any
and matches any of the supported file types.
Include File Mode
—Select
Any
to match all file types supported by
Enterprise DLP
or
Select
one or more file types.
Exclude File Mode
—
Select
specific file types to exclude from
Enterprise DLP
inspection and verdict rendering.
Any
isn't supported.
Specify the
File Direction
(
Upload
,
Download
, or
Both
).
The default file direction is
Upload
and allows inspection of uploads and downloads for supported applications.
Select the
Action
(
Alert
, or
Block
)
Enterprise DLP
takes when sensitive data is detected.
The default action is
Alert
.
(
Optional
) Set the
Log Severity
recorded for files that match this rule.
The default severity is
Low
.
Save
the data filtering profile.
Create a Shared Profile Group for the
Enterprise DLP
data filtering profile.
Select
Manage
Configuration
Security Services
Profile Groups
and
Add Profile Group
.
Enter a descriptive
Name
for the Profile Group.
For the Data Loss Prevention Profile, select the
Enterprise DLP
data profile.
Add any other additional profiles as needed.
Save
the profile group.
Create a Security policy and attached the Profile Group.
Select
Manage
Configuration
Security Policy
and
Add Rule
.
You can also update an existing Security policy to attach a Profile Group for
Enterprise DLP
filtering.
Configure the Security policy as needed.
Navigate to the Action and Advanced Inspection section, and select the
Profile Group
you created in the previous step.
Save
the Security policy.
Push Config
and push your configuration changes.