On
May 7, 2025,
Palo Alto Networks is introducing new
Evidence Storage and
Syslog Forwarding service IP
addresses to improve performance and expand availability for these services
globally.
| Where Can I Use This? | What Do I Need? |
|---|
- NGFW (Managed by Panorama or Strata Cloud Manager)
- Prisma Access (Managed by Panorama or Strata Cloud Manager)
Prisma Browser
|
Or any of the following licenses that include the Enterprise DLP license
- Prisma Access CASB license
- Next-Generation
CASB for Prisma Access and NGFW (CASB-X) license
- Data Security license
|
Traffic scanned by Enterprise DLP while Enterprise DLP is disconnected from
your cloud storage isn't stored. Files created by traffic that generated a DLP
incident during the disconnection aren't available for download. However, all snippet
data is preserved and can still be viewed in Enterprise DLP.
The file format of the matched traffic depends on the type of traffic that generated
the DLP incident.
File Based—A copy of the file that generated the incident is saved in
the same file format in which it was inspected.
Non-File—Non-file traffic is saved in
.txt format.
If a file is shared in a non-file based app (for example, Slack), the file is
saved in the same file format in which it was inspected.
Email DLP—Outbound emails are saved in
.eml format.
