>
    Strata Copilot
    Create a Peripheral Group
    Focus
    Download PDF
    Focus
    1. Home
    2. Enterprise DLP
    3. Administration
    4. Configure Enterprise DLP
    5. Endpoint DLP
    6. Create a Peripheral Group
    Download PDF
    Enterprise DLP

    Create a Peripheral Group

    Table of Contents

    Create a Peripheral Group

    Create a peripheral group to group multiple peripheral devices of the same type together to apply the same data loss prevention enforcement to multiple peripheral devices at once.
    On May 7, 2025, Palo Alto Networks is introducing new Evidence Storage and Syslog Forwarding service IP addresses to improve performance and expand availability for these services globally.
    You must allow these new service IP addresses on your network to avoid disruptions for these services. Review the Enterprise DLP Release Notes for more information.
    Where Can I Use This?What Do I Need?
    NGFW (Managed by Strata Cloud Manager)
    Prisma Access (Managed by Strata Cloud Manager)
    • Endpoint DLP license
    • Enterprise Data Loss Prevention (E-DLP) license
    • Autonomous DEM (6.0.21 or later for End User Coaching)
    • Prisma Access Agent
    • One of the following Prisma Access versions
      • 10.2—Prisma Access 5.2
      • 11.2—Prisma Access 5.1 or 5.2
    A peripheral group is a collection of peripheral devices of the same type that share the same Endpoint DLP enforcement requirements. Instead of creating a separate policy rule for each individual device, you add devices to a group and reference the group in an Endpoint DLP policy rule. A peripheral device can belong to multiple peripheral groups, so you can apply different policy rules to the same device by placing it in multiple groups with different enforcement settings.
    After you create and push a peripheral group configuration, you can view your audit and push logs to review your configuration change history and to verify that Prisma Access Agent received the update.

    Create an Endpoint DLP USB Peripheral Group

    Create a USB peripheral group to apply the same data loss prevention enforcement to multiple USB devices at once.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationData Loss PreventionSettingsPeripheral Configuration.
    3. Add USB peripheral devices to Enterprise DLP.
    4. In the Onboarded Peripherals, select USB Device.
    5. Select one or more USB devices and click Add/Create Group.
    6. Add the selected USB devices to a peripheral group.
      • Add to USB Group
        Select this option if you already created a USB peripheral group and want to add the selected devices to an existing peripheral group.
        To add the selected USB peripherals to an existing peripheral group, choose the target Group from the dropdown.
      • Create USB Group
        Select this option if no USB peripheral group exists or if you want to create and add the selected USB devices to a new peripheral group.
        Enter a peripheral group Name to add the selected USB devices to a new peripheral group.
    7. Click Save.
    8. Push your new peripheral group configuration to the Prisma Access Agent.
      1. Select Endpoint DLP PolicyPush Policies and click Push Policies.
      2. (Optional) Enter a Description for the Endpoint DLP policy push.
      3. Review the Push Policies scope to understand the changes included in the Endpoint DLP configuration push.
      4. Click Push.
    9. Create an Endpoint DLP Policy Rule.

    Create an Endpoint DLP Network Share Peripheral Group

    Create a network share peripheral group to apply the same data loss prevention enforcement to multiple network shares at once.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationData Loss PreventionSettingsPeripheral Configuration.
    3. Add network share peripheral devices to Enterprise DLP.
    4. In the Onboarded Peripherals, select Network Share.
      To narrow down the list of network share peripherals, use the search bar to search for a specific network share Name or filter by Groups.
    5. Select one or more network shares and click Add/Create Group.
    6. Add the selected network shares to a peripheral group.
      • Add to Network Share Group
        Select this option if you already created a network share peripheral group and want to add the selected network shares to an existing peripheral group.
        To add the selected network shares to an existing peripheral group, choose the target Group from the dropdown.
      • Create Network Share Group
        Select this option if no network share peripheral group exists or if you want to create and add the selected network shares to a new peripheral group.
        Enter a network share group Name to add the selected printers to a new network share group.
    7. Click Save.
    8. Push your new peripheral group configuration to the Prisma Access Agent.
      1. Select Endpoint DLP PolicyPush Policies and click Push Policies.
      2. (Optional) Enter a Description for the Endpoint DLP policy push.
      3. Review the Push Policies scope to understand the changes included in the Endpoint DLP configuration push.
      4. Click Push.
    9. Create an Endpoint DLP Policy Rule.

    Create an Endpoint DLP Printer Peripheral Group

    Create a printer peripheral group to apply the same data loss prevention enforcement to multiple printers at once.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationData Loss PreventionSettingsPeripheral Configuration.
    3. Add printer peripheral devices to Enterprise DLP.
    4. In the Onboarded Peripherals, select Printer.
    5. Select one or more printers and click Add/Create Group.
    6. Add the selected printers to a peripheral group.
      • Add to Printer Group
        Select this option if you already created a printer peripheral group and want to add the selected printers to an existing peripheral group.
        To add the selected printers to an existing peripheral group, choose the target Group from the dropdown.
      • Create Printer Group
        Select this option if no printer peripheral group exists or if you want to create and add the selected printers to a new peripheral group.
        Enter a peripheral group Name to add the selected printers to a new peripheral group.
    7. Click Save.
    8. Push your new peripheral group configuration to the Prisma Access Agent.
      1. Select Endpoint DLP PolicyPush Policies and click Push Policies.
      2. (Optional) Enter a Description for the Endpoint DLP policy push.
      3. Review the Push Policies scope to understand the changes included in the Endpoint DLP configuration push.
      4. Click Push.
    9. Create an Endpoint DLP Policy Rule.

    © 2026 Palo Alto Networks, Inc. All rights reserved.