>
    Strata Copilot
    Enterprise DLP Licenses
    Focus
    Download PDF
    Focus
    1. Home
    2. Enterprise DLP
    3. Activation & Onboarding
    4. Enterprise DLP Licenses
    Download PDF
    Enterprise DLP

    Enterprise DLP Licenses

    Table of Contents

    Enterprise DLP Licenses

    Learn about the Enterprise DLP license options available for your environment.
    On May 7, 2025, Palo Alto Networks is introducing new Evidence Storage and Syslog Forwarding service IP addresses to improve performance and expand availability for these services globally.
    You must allow these new service IP addresses on your network to avoid disruptions for these services. Review the Enterprise DLP Release Notes for more information.
    Where Can I Use This?What Do I Need?
    • NGFW (Managed by Panorama or Strata Cloud Manager)
    • Prisma Access (Managed by Panorama or Strata Cloud Manager)
    • Prisma Browser
    • Enterprise Data Loss Prevention (E-DLP) license
      Review the Supported Platforms for details on the required license for each enforcement point.
    Or any of the following licenses that include the Enterprise DLP license
    • Prisma Access CASB license
    • Next-Generation CASB for Prisma Access and NGFW (CASB-X) license
    • Data Security license
    Enterprise Data Loss Prevention (E-DLP) delivers cloud-based data loss prevention as an add-on subscription. You purchase a separate license for each channel (enforcement point) where you deploy the service, and you must register all products in the same Customer Support Portal account to use unified Enterprise DLP features such as profile sync.
    The following license options give you access to Enterprise DLP. To determine the best option for your environment, contact your Palo Alto Networks sales representative.
    • CASB-X—A cross-platform bundle for Prisma Access and hardware next-generation firewalls. This bundle includes inline Enterprise DLP, Email DLP, and Endpoint DLP.
    • CASB-PA—A Prisma Access add-on bundle that includes inline Enterprise DLP, Email DLP, and Endpoint DLP.
    • AI Access Security—Provides inline data loss prevention for GenAI apps.
    • Data Security (SaaS API)—A combined license that includes SaaS Security Inline and Enterprise DLP for Data Security (SaaS API).
    • Enterprise DLP Standalone—A subscription license that covers all supported enforcement points. You can purchase this license in 1-year, 3-year, and 5-year terms.
    • Email DLP—Provides inline Enterprise DLP inspection for outbound emails. You must have Data Security, CASB-X, or CASB-PA before you can add this license.
    • Endpoint DLP—Extends Enterprise DLP to endpoints through the Prisma Access Agent. You must have Prisma Access to use this license.
    • Enterprise License Agreement (ELA)—You can add Enterprise DLP to an Enterprise License Agreement as an add-on subscription.

    © 2026 Palo Alto Networks, Inc. All rights reserved.