Update an Existing EDM Data Set on Enterprise DLP

Table of Contents

Create and Upload an Encrypted EDM Data to Enterprise DLP in Interactive Mode

Custom Document Types for Enterprise DLP

Update an Existing EDM Data Set on Enterprise DLP

Update an existing Exact Data Matching (EDM) dataset on Enterprise Data Loss Prevention (E-DLP).

On May 7, 2025, Palo Alto Networks is introducing new Evidence Storage and Syslog Forwarding service IP addresses to improve performance and expand availability for these services globally.

You must allow these new service IP addresses on your network to avoid disruptions for these services. Review the Enterprise DLP Release Notes for more information.

Where Can I Use This?	What Do I Need?
NGFW (Managed by Panorama or Strata Cloud Manager) Prisma Access (Managed by Panorama or Strata Cloud Manager) Prisma Browser	Enterprise Data Loss Prevention (E-DLP) license Review the Supported Platforms for details on the required license for each enforcement point. Or any of the following licenses that include the Enterprise DLP license Prisma Access CASB license Next-Generation CASB for Prisma Access and NGFW (CASB-X) license Data Security license

Where Can I Use This?

What Do I Need?

NGFW (Managed by Panorama or Strata Cloud Manager)
Prisma Access (Managed by Panorama or Strata Cloud Manager)
Prisma Browser

Enterprise Data Loss Prevention (E-DLP) license
Review the Supported Platforms for details on the required license for each enforcement point.

Or any of the following licenses that include the Enterprise DLP license

Prisma Access CASB license
Next-Generation CASB for Prisma Access and NGFW (CASB-X) license
Data Security license

Update an existing Exact Data Match (EDM) dataset you already uploaded to Enterprise DLP. To quickly update an existing EDM dataset on Enterprise DLP, configure the upload_config.properties and config.properties files. To update an existing EDM dataset, you must upload the entire encrypted EDM dataset to Enterprise DLP. Updating an existing dataset on Enterprise DLP overwrites the existing dataset with the same dataset name.

If you prefer using Interactive mode to upload an EDM dataset to Enterprise DLP, see Create and Upload an Encrypted EDM Data to Enterprise DLP in Interactive Mode for more information. You must still go through the Interactive mode upload process, but you must enter n when prompted whether to create a new EDM dataset on Enterprise DLP.

On the local device where you downloaded the EDM CLI app, navigate to and open the upload_config.properties file.
The EDM CLI app bundles the upload_config.properties file in the package-edm-secure-cli-<version>-<platform>.zip file you extracted when you set up the EDM CLI app.
Edit the upload_config.properties file.
1. Enter the dataset_name of the existing EDM dataset on Enterprise DLP you want to update.
2. Save the changes to the upload_config.properties file.
Modify the config.properties file.
1. Navigate to the package-edm-secure-cli-<version>-<platform> directory and open the config.properties file.
2. For the data_file_path field, enter the path of the EDM dataset that you want to update in Enterprise DLP.
3. Modify the rest of the config.properties file as needed.
  See Create an Encrypted EDM Data Set Using a Configuration File for more information.
4. Select File and Save the configuration file.
Update the EDM dataset on Enterprise DLP.
1. Open a terminal and navigate to the package-edm-secure-cli-<version>-<platform> directory where the EDM CLI app is located.
2. Upload the existing EDM dataset to Enterprise DLP.
  All Versions
  Windows
  admin: edm-secure-cli.bat update
  
  Linux
  admin: ./edm-secure-cli.sh update
  Encrypted using EDM CLI App 6.0 or Later
  Windows
  admin: edm-secure-cli.bat update --key /path/to/folder/<key-name>.key
  
  Linux
  admin: ./edm-secure-cli.sh update --key /path/to/folder/<key-name>.key
  
  Entering this command creates a secured copy of the EDM dataset specified in the config.properties file and begins uploading to Enterprise DLP.
3. Verify that you successfully uploaded the EDM dataset to Enterprise DLP.
  
  The EDM CLI app displays a progress bar and success message to notify you whether you successfully uploaded the EDM dataset or if the upload failed.