Focus

Enterprise DLP

Known Issues in Enterprise DLP Plugin 4.0.2

Table of Contents

Known Issues in Enterprise DLP Plugin 4.0.3

Known Issues in Enterprise DLP Plugin 4.0.1

Known issues in Enterprise Data Loss Prevention (E-DLP) plugin 4.0.2.

PAN-206186

On rare occasions, the firewall fails to forward file uploads to the Box and Gmail web applications to the DLP cloud service for inspection. When this occurs, the show counter global | match wif command to display the firewall ctd-agent scanner displays ctd_wif_file_dlp_excluded .

PLUG-17207

This issue is addressed in Enterprise DLP plugin 4.0.5 and 5.0.5.

The Enterprise Data Loss Prevention (E-DLP) plugin causes the Panorama management server post-commit operation to get stuck at 99%.

PLUG-15645

This issue is addressed in Enterprise DLP plugin 4.0.4 and 5.0.2.

Enterprise Data Loss Prevention (E-DLP) continues to forward traffic to the DLP cloud service for inspection when even after a data profile (ObjectsDLPData Filtering Profiles) are removed from a Security policy rule (PoliciesSecurity).

PLUG-14534

This is addressed in Enterprise DLP plugin 4.0.3 and 3.0.7.

On the Panorama management server, the Enterprise DLP plugin fails to complete post commit tasks and causes all commits (CommitCommit to Panorama) to get stuck at 99%.

PLUG-14201

This is addressed in Enterprise DLP plugin 3.0.7, 4.0.3, and 5.0.1.

The Panorama management server is unable to a generate report if a data filtering log (MonitorLogsData Filtering) with Report ID of 0 for a DLP incident. A DLP Incident has a Report ID of 0 if the DLP cloud service was unable to scan the file.

PLUG-13729

This is addressed in Enterprise DLP plugin 4.0.3 and 5.0.1.

The Panorama management server is unable to synchronize new data profiles (ObjectsDLPData Filtering Profiles) from the DLP cloud service.

PLUG-13111

This issue is addressed in Enterprise DLP 3.0.6.

On the Panorama management server, the list of predefined URL categories are not displayed for a data profile configured for non-file inspection (ObjectsDLPData Filtering Profiles<select a data profile>URL Category List Excluded From).

PLUG-11851

On the Panorama management server, an outdated default DLP block response page is displayed when traffic matches a data filtering profile with the Action set to Block when leveraging Enterprise DLP.

PLUG-11750

After you upgrade the Panorama management server and managed firewalls leveraging Enterprise DLP from PAN-OS 10.1.7 to PAN-OS 11.0, data filtering logs (MonitorLogsData Filtering) display DLP Skipped; possible config er as the Reason for Action despite the firewall taking the correct action for matched traffic.

PLUG-11423

On the Panorama management server, modifying a data filtering pattern (ObjectsDLPData Patterns) that was cloned from a predefined data filtering pattern fails with the error regexes.

PLUG-6145

On the Panorama management server, you cannot create an admin role (PanoramaAdmin Roles) to control access to Enterprise Data Loss Prevention (DLP) filtering settings and snippet configuration (DeviceSetupDLP).

PAN-144897

Enterprise Data Loss Prevention (DLP) data profile Thread ID/Name filter is not available when you configure a custom report (ManageManage Custom Reports) on the Panorama management server or locally on a firewall leveraging Enterprise DLP.

DSS-17763

On the Panorama management server, custom data profiles (ObjectsDLPData Filtering Profiles) are not synchronized to the DLP cloud service if you have an active CASB-X license. This prevents you being able to associate the data profile with a Security policy rule and displays the error Data Profile does not exist.

Workaround: Contact Palo Alto Networks Support to restore synchronization functionality between the DLP cloud service and Panorama.

Known Issues in Enterprise DLP Plugin 4.0.3

Known Issues in Enterprise DLP Plugin 4.0.1

Enterprise DLP Docs

Known Issues in Enterprise DLP Plugin 4.0.2

Enterprise DLP Docs