Update a Data Filtering Profile on Panorama

Log in to the Panorama web interface.
Select
Objects
DLP
Data Filtering Profiles
and specify the
Device Group
.
Select a data filtering profile to edit.
Edit the data filtering profile as needed.
Modify the data filtering profile scan for
File Based
traffic,
Non-File Based
traffic, or both.
Modify the
Primary Pattern
and
Secondary Pattern
match criteria.
Modifying the data filtering profile match criteria on Panorama is supported only for Enterprise DLP data filtering profiles created on Panorama. See Create a Data Filtering Profile on Panorama for details on configuring data pattern criteria using predefined or custom data patterns.
(
Data Filtering Profile for Non-File Traffic Inspection Only
) Modify the
URL Category Excluded List from Non-File
and
Application List Excluded from Non-File
to configure which URL and application traffic is excluded from Enterprise DLP inspection.
See Create a Data Filtering Profile on Panorama for Non-File Detection for more information.
Edit the data filtering profile settings.
Enterprise DLP supports editing the following data profile settings for a data profile with EDM datasets and a data profile with data patterns and EDM datasets from Panorama.
Select the data filtering profile
Action
(
Alert
or
Block
)
If the data profile has both Primary and Secondary Patterns, changing the data filtering profile Action on Panorama deletes all Secondary Pattern match criteria.
Specify a
File Type
.
Leave the file type as
any
to match any of the supported file types.
Set the
Log Severity
recorded for files that match this data filtering profile.
Click
OK
.
Commit and push your configuration changes to your managed firewalls that are leveraging Enterprise DLP.
The
Commit and Push
command is not recommended for Enterprise DLP configuration changes. Using the
Commit and Push
command requires the additional and unnecessary overheard of manually selecting the impacted templates and managed firewalls in the Push Scope Selection.
Select
Commit
Commit to Panorama
and
Commit
.
Select
Commit
Push to Devices
and
Edit Selections
.
Select
Device Groups
and
Include Device and Network Templates
.
Click
OK
.
Push
your configuration changes to your managed firewalls that are leveraging Enterprise DLP.
Verify the changes you made to the data filtering profile.
Log in to the DLP app on the hub.
If you do not already have access to the DLP app on the hub, see the hub Getting Started Guide. Only Superusers can access the hub.
Select
Data Profiles
and search for the data filtering profile you updated.