>
    Strata Copilot
    Change Enterprise DLP Configuration with an AI Agent
    Focus
    Download PDF
    Focus
    1. Home
    2. Enterprise DLP
    3. Administration
    4. Change Enterprise DLP Configuration with an AI Agent
    Download PDF
    Enterprise DLP

    Change Enterprise DLP Configuration with an AI Agent

    Table of Contents

    Change Enterprise DLP Configuration with an AI Agent

    Ask your AI agent to update data profiles, data patterns, dictionaries, and other Enterprise DLP settings.
    Where Can I Use This?What Do I Need?
    • NGFW (Managed by Panorama or Strata Cloud Manager)
    • Prisma Access (Managed by Panorama or Strata Cloud Manager)
    • SaaS Security Inline
    • Data Security
    • Prisma AIRS
    • Prisma Browser
    • Email DLP
    • Endpoint DLP
    • Enterprise Data Loss Prevention (E-DLP) license, or one of the following licenses that include it:
      • Prisma Access CASB license
      • Next-Generation CASB for Prisma Access and NGFW (CASB-X) license
      • Data Security license
    • An AI agent and AI model that support the Model Context Protocol (MCP)
    • Node.js 18 or later installed on the machine that runs your AI agent
    • An Enterprise DLP MCP server configured for read-write access
    • A service account with a role that grants write access to Enterprise DLP
    Use the MCP server to view and manage Enterprise DLP configurations and data. However, you must manually apply the configuration to your enforcement points.
    Change your configuration with your AI agent to apply tuning changes, such as the changes that you identify when you investigate false positives, without opening each object in Strata Cloud Manager. This procedure changes your configuration, so capture the current state first and review each change before your agent applies it.
    1. (Optional) Ask your agent to save a snapshot of your current configuration.
      For example, enter Export my tenant configuration snapshot so I can review it offline. The agent runs the tenant-snapshot skill.
    2. Ask your agent to show the current configuration of the object that you want to change.
      For example, enter Show me the current configuration of the data profile PROFILE_NAME.
    3. Describe the change that you want to make.
      For example, you can ask your agent to:
      • Raise the occurrence threshold of a data profile.
      • Add keywords to a data dictionary.
      • Update the regular expression of a custom data pattern.
      • Change the action of a data profile from alert to block.
    4. Ask your agent to explain the change it proposes before it applies the change.
      Review the proposed values and the objects that the change affects. Ask your agent to adjust the proposal if it isn't what you intended.
    5. Ask your agent to apply the change.
    6. Verify the change in Strata Cloud Manager.
      You can also manage data profiles and data patterns directly in Strata Cloud Manager.

    © 2026 Palo Alto Networks, Inc. All rights reserved.