: Create a Custom Data Pattern on the DLP App
Focus
Focus

Create a Custom Data Pattern on the DLP App

Table of Contents

Create a Custom Data Pattern on the DLP App

Create an
Enterprise Data Loss Prevention (E-DLP)
custom data pattern on the DLP app on the hub.
Create an
Enterprise Data Loss Prevention (E-DLP)
custom data pattern on the DLP app on the hub using regular expressions. Create data patterns to specify the match criteria and identify patterns using regular expressions and keywords that represent sensitive information on your network. All data patterns you create are shared across all device groups on the DLP app. After you successfully create a custom data pattern, it’s automatically synchronized to the Panorama management server managing your
Enterprise DLP
firewalls and to
Cloud Management
. All custom data patterns created on the DLP app can be edited and copied as needed.
  1. Log in to the DLP app on the hub.
    If you don’t already have access to the DLP app on the hub, see the hub Getting Started Guide. Only Superusers can access the hub.
  2. Select
    Detection Methods
    Data Patterns
    and
    Add Data Patterns
    .
    You can also create a new custom data pattern by copying an existing custom data pattern. To copy a custom data pattern, expand the Actions column for the data pattern you want to copy and
    Clone
    the data pattern. You can then configure the custom data pattern you copied as needed.
  3. Select the
    Custom
    data pattern.
  4. Enter a descriptive
    Data Pattern Name
    .
  5. (
    Optional
    ) Enter a
    Description
    for the data pattern.
  6. Select the type of
    Regular Expression
    .
    You can choose
    Basic
    or
    Weighted
    data patterns. Use the
    Weighted
    data pattern to create a basic or weighted regular expression. With weighted regular expressions, each text entry is assigned a score and when the score threshold is exceeded, such as when enough expressions from a pattern match an asset,
    Enterprise DLP
    will indicate that the asset is a match for the pattern.
    Then use the query builder in the
    Regular Expressions
    field to add either regular (
    Basic
    ) or
    Weighted
    expressions.
  7. (
    Optional
    ) Enter one or more
    Proximity Keywords
    .
    Proximity keywords aren’t case-sensitive. You can enter one or more proximity keywords to increase the probability
    Enterprise DLP
    accurately detects a regular expression match. Proximity keywords impact the
    Enterprise DLP
    confidence level, which reflects how confident
    Enterprise DLP
    is when detecting matched traffic.
    Enterprise DLP
    determines confidence level by inspecting the distance of regular expressions to proximity keywords.
  8. Save
    the data pattern.

Recommended For You