Set Up SFTP Storage to Save Evidence for Cloud Management

Launch the Cloud Management Console.
Access to evidence storage settings and files on
Cloud Management
is allowed only for an account administrator or app administrator role with
Enterprise DLP
read and write privileges. This is to ensure that only the appropriate users have access to report data and evidence.
Select
Manage
Configuration
Security Services
Data Loss Prevention
Settings
Sensitive Data
and select
Configure Bucket
SFTP
as the Public Cloud Storage Bucket.
Review the
Instructions - SFTP
and click
Next
.
Input Bucket Details
to configure the SFTP server connection settings.
Enter the

Username

of the SFTP server user used for secure file uploads.

The user is required to have read and write access to the SFTP server.

Enter the

Private Key

for the SFTP server.

This is required to authenticate the SSH connection to the SFTP server. The

Private Key

must include both the

BEGIN RSA PRIVATE KEY

and

END RSA PRIVATE KEY

prompts.

(

Optional

) Enter the public

PGP Key

to sign and encrypt files uploaded to the SFTP server.

Pretty Good Privacy (PGP) is an encryption program providing privacy and authentication for data communication, and used for signing, encrypting, and decrypting files. The

PGP Key

must include both the

BEGIN RSA PRIVATE KEY

and

END RSA PRIVATE KEY

prompts.



Enter the

Hostname

of the SFTP server.

The

Hostname

can be a Fully Qualified Domain Name (FQDN) or an IPv4 address.

(

Optional

) Enter the

Folder Path

for uploaded files to specify the target location where files are uploaded to on the SFTP server.

If no

Folder Path

is specified, the DLP cloud service creates the default

reportId

folder at the top-most folder the

Username

has read and write access to. The folder path for uploaded files depends on whether a

Folder Path

is specified.

Folder Path Specified
—<
folder path
>
/reportId/
<
file name
>
Folder Path Not Specified
—
/reportId/
<
file name
>

Enter the

Port

number through which files are uploaded to the SFTP server.

Palo Alto Networks recommends using Port 22 for file uploads to your SFTP server. For uncommon ports,

Enterprise DLP

needs to open the egress port for connection and upload.


Connect
to the SFTP server.
As part of the setup process, a file called
Palo_Alto_Networks_DLP_Connection_Test.txt
is uploaded to the target
Folder Path
on your SFTP server. Connectivity between the DLP cloud service and your SFTP server is successful if DLP cloud service successfully uploads the test file.
The
Connection Status
displays whether the initial connection test was successful. Continue to the next step when the
Bucket connected successfully
.
Click
Previous
if the connection isn’t successful to modify the SFTP server and connection settings as needed.

Save
the SFTP server connectivity settings.
Download Files for Evidence Analysis on Panorama.