Configure Connectivity to the DLP Cloud Service

Create the authentication mechanism used to connect the EDM CLI application to the DLP cloud service.

SASE Platform
—Supported on EDM CLI application version 2.2 and later releases.
If you are leveraging Enterprise DLP using the SASE Platform, you must add a service account that includes a
Client ID
and
Client Secret
. These are used to authenticate and connect the EDM CLI application to the DLP cloud service.
DLP app on the hub

Log in to the DLP app on the hub.
If you do not already have access to the DLP app on the hub, see the hub Getting Started Guide. Only Superusers can access the hub.
Select
Settings
API Tokens
and
Create Token
.
Enter a descriptive
Token Name
and
Create
the access token.
Copy the
Access Token
and
Refresh Token
and save them in a secure location.
The access and refresh tokens are displayed only once after initial creation and cannot be viewed again. If you lose the access or refresh tokens, you must create a new access token.

Prisma Access (Cloud Managed)

Launch Prisma Access Cloud Management.

Select

Configuration

Security Services

Data Loss Prevention

Settings

API Tokens

and

Create Token

.

Enter a descriptive

Token Name

and

Create

the access token.

Copy the

Access Token

and

Refresh Token

and save them in a secure location.

The access and refresh tokens are displayed only once after initial creation and cannot be viewed again. If you lose the access or refresh tokens, you must create a new access token.



On the local device where you downloaded the EDM CLI application, navigate to and open the

upload_config.properties

file.

The

upload_config.properties

file is bundled with the

package-edm-secure-cli-<version>-<platform>.zip

file contents you extracted when you set up the EDM CLI application.



Configure the

upload_config.properties

file to enable connectivity to the DLP cloud service.

Configure the authentication method.
Specify whether you
have_access_token_refresh_token
.
If you created an access token, enter
yes
.
If you are leveraging the SASE Platform and added a service account, enter
no
.
Configure authentication.
(
Access Token
) Add the
access_token
and
refresh_token
you created in the previous step.
(
SASE Platform
) Add the
client_id
and
client_secret
.
Specify whether the local device uploading the EDM data set to the DLP cloud service requires a proxy server to the connect to the internet.
If proxy server is not required, enter
no
(default). If a proxy server is required, enter
yes
.
(
Proxy server only
) Enter the
proxy_host_name
and
proxy_port_number
.
Skip this step if a proxy server is not required for the local device to connect to the internet.
(
Proxy server only
) Enter the
proxy_user_name
and
proxy_password
.
Skip this step if a proxy server is not required for the local device to connect to the internet.
Enter the
dataset_name
for the EDM data set you want to upload. The data set name entered here is used in the DLP app for the uploaded EDM data set.
Save the changes to the
upload_config.properties
file.