1. Home
    2. Enterprise DLP
    3. Enterprise DLP Administrator’s Guide
    4. Set Up Enterprise DLP
    5. Register and Activate Enterprise DLP on Prisma Access (Panorama Managed)

    Register and Activate Enterprise DLP on Prisma Access (Panorama Managed)

    Complete the task to register and activate Enterprise DLP on Prisma Access (Panorama Managed).
    Data Loss Prevention (DLP) on Prisma Access enables you to secure remote networks and users, and requires an add-on license.
    To register and the Enterprise DLP plugin to use with Prisma Access, complete one of the following procedures:

    Preinstallation Requirements

    Before you install the Enterprise DLP plugin, make sure that your Prisma Access deployment has the following requirements:

    Install the Enterprise DLP Plugin—New DLP Deployments

    After you have completed the Preinstallation Steps, complete the following steps to install the DLP plugin on Panorama.
    1. From the Panorama that manages Prisma Access, select
      Panorama
      Plugins
       and search for the latest version of the DLP plugin.
      Prisma Access requires a minimum DLP plugin version of 1.0.3.
    2. Download
       and
      Install
       the Enterprise DLP plugin on Panorama.
    3. Commit your changes to Panorama by selecting
      Commit
      Commit to Panorama
       and
      Commit
       your configuration changes.
    4. (
      Optional
      ) if your Panorama manages on-premise firewalls as well as Prisma Access, commit and push the changes to your managed firewalls.
      This step is required in order for Enterprise DLP data filtering profile names to appear in Data Filtering logs.
      1. Select
        Commit
        Commit to Panorama
         and Commit your configuration changes.
      2. Select
        Commit
        Push to Devices
         and
        Edit Selections
        .
      3. Select
        Device Groups
         and
        Include Device and Network Templates
         and click
        OK
        .
      4. Push
         your configuration changes to your managed firewalls.

    Upgrade to the Enterprise DLP Plugin—Existing Enterprise DLP on Prisma Access Deployments

    If you have an existing DLP on Prisma Access deployment, complete the following steps.
    1. Make sure that you have completed the following actions before installing the Enterprise DLP plugin:
      • You have had your Prisma Access dataplane upgraded to a minimum version of 10.0.
        To find your dataplane version, select
        Panorama
        Cloud Services
        Configuration
        Service Setup
         and view the
        Current Dataplane version
         in the
        DataPlane PAN-OS version
         area. If the
        DataPlane PAN-OS version
         is 10.0 or later, your dataplane is compatible with the DLP plugin.
        If your deployment is a dataplane version that is earlier than 10.0, use this document to register and activate Enterprise DLP on Prisma Access.
      • You have upgraded and installed the Cloud Services plugin for your Prisma Access release, and your plugin version is 2.0 Innovation, 2.1. Innovation, 2.2 Preferred, or a later Preferred or Innovation version.
        2.0 Preferred and 2.1 Preferred Prisma Access releases do not support using the DLP plugin with Prisma Access.
    2. Install and activate the DLP plugin. Make a note of the following caveats during installation:
      • You do not have to verify that the Panorama and Prisma Access belong to the same CSP account; you have already associated the Panorama serial number with the CSP account when you installed Prisma Access.
      • You do not have to activate the Enterprise DLP plugin on Prisma Access. However, if you have managed firewalls, you should complete the steps to enter the auth code for the target managed firewalls.
    3. (
      Optional
      ) If you have existing data patterns and data filtering profiles that you use for Enterprise DLP on Prisma Access, verify that the installation process completed successfully by checking that the data patterns and data filtering profiles moved to the following locations in Panorama:
      • Data patterns move from
        Objects
        Custom Objects
        Data Patterns
         to
        Objects
        DLP
        Data Filtering Patterns
        .
      • Data filtering profiles move from
        Objects
        Security Profiles
        Data Filtering
         to
        Objects
        DLP
        Data Filtering Profiles
        .

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo