Auth code-based activation for Enterprise Data Loss Prevention (E-DLP) creates significant challenges in policy rule enforcement and synchronization consistency. Without tenant service group (TSG) selection capability, enterprises can’t leverage existing Enterprise DLP data patterns and profiles across their data security enforcement points, resulting in fragmented policy rule enforcement.

You now activate the Enterprise Data Loss Prevention (E-DLP) license for NGFW and VM-Series firewalls managed by either Panorama or Strata Cloud Manager using a magic link rather than using an auth code. The new magic link activation flow resolves these pain points by allowing you to select a specific TSG during activation to enable a shared Enterprise DLP configuration between your NGFW, Prisma Access tenants, and VM-Series firewalls. This unified approach supports multiple deployment scenarios, including single or multiple TSGs rolling up to one CSP and hybrid environments with various enforcement points. Additionally, it gives your data security admins the flexibility to disassociate and reassociate Enterprise DLP licenses between enforcement points as your needs change.