Document:Enterprise DLP Administrator’s Guide

Create a Custom Data Pattern on Cloud Management

Filter

Create a Custom Data Pattern on Cloud Management

Create an Enterprise data loss prevention (DLP) custom data pattern for Prisma Access (Cloud Managed) and SaaS Security on Cloud Management.

Create an Enterprise data loss prevention (DLP) custom data pattern for Prisma Access (Cloud Managed) and SaaS Security on Cloud Management using regular expressions. Create data patterns to specify the match criteria and identify patterns using regular expressions and keywords that represent sensitive information on your network. All data patterns you create are shared across all Prisma Access (Cloud Managed) and SaaS Security deployments associated with the tenant. After you successfully create a custom data pattern, it is automatically synchronized to the DLP app on the hub. All custom data patterns created on Cloud Management can be edited and copied as needed.

Launch the Cloud Management Console.

Select

Manage

Configuration

Security Services

Data Loss Prevention

Detection Methods

Data Patterns

Add Data Patterns

and select

Custom

You can also create a new custom data pattern by copying an existing custom data pattern. To copy a custom data pattern, select the data pattern name to view the data pattern details and copy (

). You can then configure the custom data pattern you copied as needed.

Enter a descriptive

Data Pattern Name

(Optional) Enter a

Description

for the data pattern.

Select the type of

Regular Expression

You can choose

Basic

Weighted

data patterns. Use the

Weighted

data pattern to create a basic or weighted regular expression. With weighted regular expressions, each text entry is assigned a score and when the score threshold is exceeded, such as when enough expressions from a pattern match an asset, Enterprise DLP will indicate that the asset is a match for the pattern.

Then use the query builder in the

Regular Expressions

field to add either regular (

Basic

) or

Weighted

expressions.

(Optional) Enter one or more

Proximity Keywords

You can enter one or more proximity keywords to use with the data pattern. Use proximity keywords in a data profile with a high level of confidence. When you upload a file, the managed Prisma Access compute node looks for the proximity keywords you specify within the first 200 characters of the regular expressions before it considers the specified data pattern to be a match in the file.