Activate the Enterprise DLP License for Prisma Access

1. Contact your Palo Alto Networks representative to purchase the Prisma Access and Enterprise DLP licenses.
2. Click the magic link provided to you by Palo Alto Networks when you purchased the Prisma Access license.
3. Activate the Prisma Access license.

   • Activate the license for Prisma Access (Managed by Panorama).
   • Activate the license for Prisma Access (Managed by Strata Cloud Manager).
4. Enable the Enterprise DLP add-on.

   • Prisma Access (Managed by Panorama) —The Enterprise DLP add-on is enabled by default when you activate the Prisma Access license.
   • Prisma Access (Managed by Strata Cloud Manager)—Enable the Enterprise DLP add-on after activating the Prisma Access license.
5. Log in to Strata Cloud Manager and verify that you can select ConfigurationData Loss Prevention.
6. (Prisma Access (Managed by Panorama) only) Install the Enterprise DLP Plugin on Panorama.

   If you're managing your Prisma Access tenants from Panorama, you must install the Enterprise DLP plugin on Panorama to manage your Enterprise DLP configuration, synchronize Enterprise DLP configuration objects with Strata Cloud Manager, and to push Enterprise DLP configuration changes to your Prisma Access tenants. A Panorama with the Enterprise DLP plugin installed is required.
7. Enable Enterprise DLP.

   Some apps, such as SharePoint and OneDrive, use HTTP/2 by default. For NGFW, Prisma Access tenants, and VM-Series firewalls managed by Panorama or by Strata Cloud Manager running PAN-OS 10.2.2 and earlier releases, you must create a decryption profile and a Security policy rule to strip out the application-layer protocol negotiation (ALPN) extension in headers. Complete these steps to successfully forward traffic to Enterprise DLP.