Create a Custom Data Pattern on the DLP App

reate an Enterprise data loss prevention (DLP) custom data pattern on the DLP app on the hub.
Create an Enterprise data loss prevention (DLP) custom data pattern on the DLP app on the hub using regular expressions. Create data patterns to specify the match criteria and identify patterns using regular expressions and keywords that represent sensitive information on your network. All data patterns you create are shared across all device groups on the DLP app. After you successfully create a custom data pattern, it is automatically synchronized to the Panorama management server managing your Enterprise DLP firewalls and to Prisma Access (Cloud Managed). All custom data patterns created on the DLP app can be edited and copied as needed.
  1. Log in to the DLP app on the hub.
    If you do not already have access to the DLP app on the hub, see the hub Getting Started Guide. Only Superusers can access the hub.
  2. Select
    Detection Methods
    Data Patterns
    and
    Add Data Patterns
    .
    You can also create a new custom data pattern by copying an existing custom data pattern. To copy a custom data pattern, expand the Actions column for the data pattern you want to copy and
    Clone
    the data pattern. You can then configure the custom data pattern you copied as needed.
  3. Select the
    Custom
    data pattern.
  4. Enter a descriptive
    Data Pattern Name
    .
  5. (
    Optional
    ) Enter a
    Description
    for the data pattern.
  6. Select the type of
    Regular Expression
    .
    You can choose
    Basic
    or
    Weighted
    data patterns. Use the
    Weighted
    data pattern to create a basic or weighted regular expression. With weighted regular expressions, each text entry is assigned a score and when the score threshold is exceeded, such as when enough expressions from a pattern match an asset, Enterprise DLP will indicate that the asset is a match for the pattern.
    Then use the query builder in the
    Regular Expressions
    field to add either regular (
    Basic
    ) or
    Weighted
    expressions.
  7. (
    Optional
    ) Enter one or more
    Proximity Keywords
    .
    You can enter one or more proximity keywords to use with the data pattern. Use proximity keywords in a data profile with a high level of confidence. When you upload a file, the managed Prisma Access compute node looks for the proximity keywords you specify within the first 200 characters of the regular expressions before it considers the specified data pattern to be a match in the file.
  8. Save
    the data pattern.

Recommended For You