Focus

Upgrade the Enterprise DLP Plugin

Table of Contents

Upgrade the Enterprise DLP Plugin

Upgrade the Enterprise Data Loss Prevention (E-DLP) on your Panorama® management server.
Upgrade the Enterprise Data Loss Prevention (E-DLP) plugin version installed on your Panorama® management server.
See the Palo Alto Networks Panorama plugin Compatibility Matrix and review the minimum PAN-OS version required for your target Enterprise DLP plugin version.
  1. (Upgrade to 4.0 and later releases) Contact Palo Alto Networks Support and open a ticket to request that a migration script convert all your existing predefined and custom data filtering profiles.
    In PAN-OS 11.0 and later releases and Enterprise DLP plugin 4.0 and later releases, Enterprise DLP removed the Any setting for the data filtering profile File Type setting.
    Upgrade to PAN-OS 11.0 or later releases and Enterprise DLP plugin 4.0 or later releases without migrating our predefined and custom data filtering profiles results in validation errors that prevent commits on Panorama.
  2. Log in to the Panorama web interface.
  3. Upgrade the Enterprise DLP plugin version on Panorama.
    For Panorama in a high availability (HA) configuration, repeat this step on the Panorama HA peer.
    1. Select PanoramaPlugins and Check Now for the latest dlp plugin verison.
    2. Download and Install the latest version of the Enterprise DLP plugin.
    3. After the new plugin version successfully installs, view the Panorama Dashboard and verify in the General Information widget that the Plugin DLP version displays the Enterprise DLP plugin version you upgraded to.
  4. Upgrade the
  5. (Upgrade to 4.0.0 only) Edit Enterprise DLP data filtering settings to reduce the Max File Size to 20 MB or less.
    This is required when upgrading from Panorama plugin for Enterprise DLP 3.0.3 or later releases to Enterprise DLP 4.0.0 or later releases as this plugin version does not support large file size inspection.