Create a Data Pattern on Panorama
Create a data pattern to identify sensitive information
on your network when leveraging Enterprise DLP (data loss prevention).
After you set up Enterprise data loss prevention
(DLP) on Panorama or Panorama-managed Prisma
Access, create data patterns to specify the match criteria
and identify patterns using regular expressions, file properties,
and keywords that represent sensitive information on your network.
All data patterns you create are shared across all device groups.
After you successfully commit a custom data pattern to Panorama,
it is automatically synchronized to the DLP app on the hub.
- Selectand specify theObjectsDLPData Filtering PatternsDevice Group.
- Adda new data pattern.
- Specify aTypeand criteria for the data pattern and specify aName.Use any of the following data pattern types:
- Regular Expression—Create regular expressions to use in the data pattern.You can chooseBasicorAdvanceddata patterns. Use theAdvanceddata pattern to create a basic or weighted regular expression. With weighted regular expressions, each text entry is assigned a score and when the score threshold is exceeded, such as when enough expressions from a pattern match an asset, Enterprise DLP will indicate that the asset is a match for the pattern.Then use the query builder in theRegular Expressionsfield to add either regular (Basic) or weighted (Advanced) expressions.You can enter one or moreProximity Keywordsto use with the data filtering pattern. Use proximity keywords in a data filtering profile with a high level of confidence. When you upload a file, the managed firewall looks for the proximity keywords you specify within the first 200 characters of the regular expressions before it considers the specified data pattern to be a match in the file.
- File Property—Add a file property pattern on which to match.For data governance and protection of information, if you use classification labels or embed tags in MS Office and PDF documents to include more information for audit and tracking purposes, you can create a file property data pattern to match on the metadata or attributes that are part of the custom or extended properties in the file. Regardless whether you use an automated classification mechanism, such as Titus, or whether require users to add a tag, you can specify a name-value pair on which to match on a custom or extended property embedded in the file.Enterprise DLP supports file property data patterns in MS Office and PDF documents and supports both the OLE (.doc/.ppt) and XML (.docx/.pptx) formats of MS Office.Then add aTag NameandTag Value.ATag NameandTag Valueare an associated pair that specifies the property for which you want to look (for example, you can specify aTag NameofLabeland aTag ValueofConfidential). You can add as many file properties as you’d like and when you later reference the file property data pattern in a data filtering profile, Enterprise DLP will use a boolean OR match in the match criteria.For files protected with Microsoft Azure Information Protection (AIP), you must enter the full AIP labelNamethat you want to take action on. This can be either theMSIP_Label_<GUID>_Enabledlabel name or theSensitivitylabel name.
- ClickOKto save the data pattern.
- Commit and push your configuration changes to your managed firewalls that are leveraging Enterprise DLP.TheCommit and Pushcommand is not recommended for Enterprise DLP configuration changes. Using theCommit and Pushcommand requires the additional and unnecessary overheard of manually selecting the impacted templates and managed firewalls in the Push Scope Selection.
- SelectandCommitCommit to PanoramaCommit.
- SelectandCommitPush to DevicesEdit Selections.
- SelectDevice GroupsandInclude Device and Network Templates.
- ClickOK.
- Pushyour configuration changes to your managed firewalls that are leveraging Enterprise DLP.
- Create a Data Filtering Profile on Panorama using one or more data patterns.
Most Popular
Recommended For You
Recommended Videos
Recommended videos not found.