Panorama

1. Log in to the Panorama web interface.
2. (Optional) Configure syslog forwarding for Enterprise DLP incidents.
3. Select MonitorLogsData Filtering and Filter the data filtering logs by entering ( subtype eq dlp ).
4. View more details about the file including file snippets.

   1. Click

      to the left of the specific log entry for which you want to view more details.
   2. Select DLP to view the pattern details.
   3. Show Snippet to view a snippet of the data that matched the specific data pattern.

      For nested data profiles, Enterprise DLP displays the name of the nested data profile and not the specific data profile containing the match criteria that matched inspected traffic. For example, you create a nested data profile called DataProfile and you add Profile1, Profile2, and Profile3. Enterprise DLP inspects traffic that matches Profile2 and blocks it. In this scenario, the Data Profile Name in the DLP incident logs displays DataProfile.

   4. Review the masked snippet to understand what sensitive data Enterprise DLP detected.

5. Manage your Enterprise DLP incidents.