Enterprise DLP
Enable Exact Data Matching (EDM)
Table of Contents
Enable Exact Data Matching (EDM)
Enable Exact Data Matching (EDM) on Strata Cloud Manager and the DLP app on the
hub.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
Or any of the following licenses that include the Enterprise DLP
license
|
Exact Data Matching (EDM) is an advanced detection tool to monitor and protect sensitive
data from exfiltration. Use EDM to detect sensitive and personally identifiable
information (PII) such as social security numbers, Medical Record Numbers, bank account
numbers, and credit card numbers, in a structured data source such as databases,
directory servers, or structured data files (CSV and TSV), with high accuracy. You must
first enable EDM for Enterprise Data Loss Prevention (E-DLP) to upload hash encrypted EDM data sets to
the DLP cloud services to use as match criteria in advanced data profiles.
It might take 24-48 hours for Palo Alto Networks to enable EDM functionality.
Strata Cloud Manager
Enable Exact Data Matching (EDM) on Strata Cloud Manager to upload encrypted EDM data
sets.
- Log in to Strata Cloud Manager.Select .Enable EDM.Review and Close the EDM confirmation that your OCR enablement request was successfully submitted.
![]()
Cloud Management displays Enablement Request Sent while your enablement request is pending.Set Up the EDM CLI Application after EDM is enabled on Cloud Management.EDM functionality is enabled when you can download the EDM CLI application and view the table where uploaded EDM data sets will be displayed.DLP App
Enable Exact Data Matching (EDM) on the DLP app on the hub to upload encrypted EDM data sets.- Log in to the DLP app on the hub.If you don’t already have access to the DLP app on the hub, see the hub Getting Started Guide. Only Superusers can access the hub.Select .Request Enablement.
![]()
When prompted, click Send Request to confirm your request to enable EDM.The DLP app on the hub displays Enable Request Sent while your enablement request is pending.Set Up the EDM CLI Application after EDM is enabled on the DLP app.EDM functionality is enabled when you can download the EDM CLI application and view the table where uploaded EDM data sets will be displayed.
