Web Form Data Inspection for Enterprise Data Loss Prevention

Log in to the Panorama web interface.
Create a Data Pattern on Panorama.
(
Optional
) Create a custom URL category for URL or domain traffic you don’t want to send to the DLP cloud service for inspection.
(
Optional
) Create a custom application filter for application traffic that you don’t want to send to the DLP cloud service for inspection.
Select
Objects
Application Filters
and
Add
a new application filter.
You can also select and
Clone
the predefined
DLP App Exclusion Filter
to create a custom application filter.
Check (enabled)
Shared
.
Configure the application filter as needed.
See Create an Application Filter for more information.
Click
OK
.
Select
Commit
and
Commit to Panorama
.
Create a data filtering profile to inspect non-file based traffic.
See Create a Data Filtering Profile on Panorama for additional details on creating a data filtering profile.
Select
Objects
DLP
Data Filtering Profile
and
Add
a data filtering profile.
Enter descriptive
Name
for the data filtering profile.
For Non File Based, select
Yes
.
Enable (check)
Shared
.
Add
the
Primary Pattern
and
Secondary Pattern
match criteria as needed.
(
Optional
) Select
URL Category
and
Add
a URL category to exclude from inspection.
You can add one or more external dynamic lists, custom URL category, and predefined URL category
Select
Application List
and
Add
an application list to exclude from inspection.
At least one application filter is required to successfully create a data filtering profile for non-file based traffic.
Configure the
Action
.
Configure the
Log Severity
.
Click
OK
.
Attach the data filtering profile to a Security policy rule.
Select
Policies
Security
and specify the
Device Group
.
Select the Security policy rule to which you want to add the data filtering profile.
Select
Actions
and set the
Profile Type
to
Profiles
.
Select the
Data Filtering
profile that you created previously.
Click
OK
to save your policy rule.
Commit and push your configuration changes to your managed firewalls that are using Enterprise DLP.
The
Commit and Push
command isn’t recommended for Enterprise DLP configuration changes. Using the
Commit and Push
command requires the additional and unnecessary overheard of manually selecting the impacted templates and managed firewalls in the Push Scope Selection.
Select
Commit
Commit to Panorama
and
Commit
.
Select
Commit
Push to Devices
and
Edit Selections
.
Select
Device Groups
and
Include Device and Network Templates
.
Click
OK
.
Push
your configuration changes to your managed firewalls that are using Enterprise DLP.