Archive and restore your custom data patterns to help reduce configuration sprawl, administrative overhead, and difficulty maintaining an optimized data protection strategy.

√

√

Audit logs for a comprehensive history of the changes that occurred across Enterprise DLP. They maintain a history of when data patterns and data profiles are created, updated, or deleted.

√

√

Export and import your Enterprise DLP to provides data security administrators the ability to manage your Enterprise DLP configuration across different environments and share configurations with security teams, compliance officers, and other stakeholders who need visibility into Enterprise DLP configuration without direct access to your production Strata Cloud Manager tenant or your Panorama.

√

√

Custom data profile that can use any predefined data pattern, regular expression (regex) data patterns and custom file property data patterns, and advanced detection methods.

√

√

The Data Asset Explorer provides comprehensive visibility into all sensitive files, messages, and non-file based traffic, referred to as assets, detected by Enterprise DLP across your data security enforcement channels.

√

√

Data dictionaries are a collection of one or more keywords or phrases that you want to detect and prevent exfilitration. A data dictionary is added as a match criteria alongside the other supported match criteria in advanced and nested data profiles to increase the Enterprise DLP detection accuracy.

√

√

Provides quantifiable metrics to measure the overall data risk for your organization and gives administrators the ability to analyze and take preventative action to strengthen your data risk security posture using the Data Risk Dashboard.

√

Enterprise DLP performs inline inspection of outbound emails to prevent exfiltration of emails containing sensitive information using AI/ML powered data detections.

—

√

Use Endpoint DLP to prevent exfiltration of sensitive data to peripheral devices such as USB devices, printers, and network shares, or to control access to them.

√

Integrate Enterprise DLP with Cortex XSOAR to use Enterprise DLP End User Alerting, granting your team members the ability to self-service temporary exemptions for file uploads that match your data profiles.

√

√

End User Coaching allows you to display notifications to end users in the Access Experience User Interface (UI) when they generate an Enterprise DLP or Endpoint DLP incident.

—

√

Connect an AWS storage bucket, Azure storage bucket, or SFTP server to Enterprise DLP to automatically store files scanned by tEnterprise DLP that match your data profiles. After Enterprise DLP successfully stores a file, you can download the file for further investigation.

√

√

Granular data profiles enhance your Enterprise Data Loss Prevention (E-DLP) detection capabilities by allowing you to apply differentiated inline content inspection requirements and response actions within the same Security policy rule. For example, you can use a single granular data profile to block high-risk data patterns while alerting on lower-risk ones, set varying log severities for different data profiles, and selecting specific file types for each data profile included the granular data profile.

√

√

Configure Internet Content Adaptation Protocol (ICAP) forwarding to integrate your existing on-premises third party DLP solutions with Enterprise Data Loss Prevention (E-DLP).

√

√

Monitor sharing of sensitive passwords over chat-based applications. Enterprise DLP uses contextual messages to understand instances where a password might have been shared. When Enterprise DLP detects that a password was shared, a DLP Incident is generated that displays a snippet of the response containing the password.

√

Use the Enterprise Data Loss Prevention (E-DLP) Migrator to migrate your Symantec DLP policy rules and convert them into SaaS Security policy rules. This allows you to quickly transition to Palo Alto Networks Enterprise DLP without the need to manually recreate all your Security policy rules designed to prevent exfiltration of sensitive data.

√

Custom data profile that contains multiple nested data profiles that allows you to consolidate the match criteria to prevent exfiltration of sensitive data to a single data profile that can be used in a single Security policy rule.

√

√

√

√

Regional Storage for Data Dictionaries

Upload data dictionaries directly to Enterprise DLP storage buckets to a specific supported region. Administrators can select the appropriate region during upload, ensuring sensitive customer data remains within approved geographical boundaries.

√

√

Regional Storage for Evidence Storage

Upload DLP incident evidence files directly to Enterprise DLP storage buckets to a specific supported region. Administrators can select the appropriate region during upload, ensuring sensitive customer data remains within approved geographical boundaries.

√

√

Report false positive detections to Palo Alto Networks to improve Enterprise DLP detection accuracy for yourself and other Enterprise DLP users. You report false positive detections against the DLP Incident where the false positive detection occurred.

√

√

Shadow Data Discovery enables your data security administrators to analyze your organization's data to identify patterns and categories without requiring you to predefine what constitutes sensitive information. When you enable this feature, Enterprise Data Loss Prevention (E-DLP) runs summarization and categorization on your nonsensitive file-based assets, collecting summaries for up to 100,000 documents before training categorization models. Once trained, these models create categories with descriptions that help you understand what types of data exist in your environment.

—

√

—

√

Test the efficacy of your Enterprise Data Loss Prevention (E-DLP) data profiles before adding them to your Security policy rule and pushing to your production NGFW and Prisma Access tenants. This allows you to validate your data profiles against a file containing known sensitive data to ensure accurate detection by Enterprise DLP.

√

√

The Unified Incident Management and Response dashboard uses AI-powered detection and customizable workflows to accelerate response times and minimize the impact of security breaches by enhancing team collaboration. It provides a structured approach to incident handling by consolidating and correlating security incidents across supported enforcement points to ensure a consistent security posture.

√

√