Register and Activate Enterprise DLP on Prisma Access (Panorama Managed)

Complete the task to register and activate Entrerprise DLP on Prisma Access (Panorama Managed).
Data Loss Prevention (DLP) on Prisma Access enables you to secure remote networks and users, and requires an add-on license.
To register and the Enterprise DLP plugin to use with Prisma Access, complete one of the following procedures:

Preinstallation Requirements

Before you install the Enterprise DLP plugin, make sure that your Prisma Access deployment has the following requirements:

Install the Enterprise DLP Plugin—New DLP Deployments

After you have completed the Preinstallation Steps, complete the following steps to install the DLP plugin on Panorama.
  1. From the Panorama that manages Prisma Access, select
    Panorama
    Plugins
    and search for the latest version of the DLP plugin.
    Prisma Access requires a minimum DLP plugin version of 1.0.3.
  2. Download
    and
    Install
    the Enterprise DLP plugin on Panorama.
  3. Commit your changes to Panorama by selecting
    Commit
    Commit to Panorama
    and
    and Commit
    your configuration changes.
  4. (
    Optional
    ) if your Panorama manages on-premise firewalls as well as Prisma Access, commit and push the changes to your managed firewalls.
    This step is required in order for Enterprise DLP data filtering profile names to appear in Data Filtering logs.
    1. Select
      Commit
      Commit to Panorama
      and Commit your configuration changes.
    2. Select
      Commit
      Push to Devices
      and
      Edit Selections
      .
    3. Select
      Device Groups
      and
      Include Device and Network Templates
      and click
      OK
      .
    4. Push
      your configuration changes to your managed firewalls.

Upgrade to the Enterprise DLP Plugin—Existing Enterprise DLP on Prisma Access Deployments

If you have an existing DLP on Prisma Access deployment, complete the following steps.
  1. After you have completed the Enterprise DLP plugin preinstallation requirements, have had your Prisma Access dataplane upgraded, and have upgraded and installed the Cloud Services plugin to a minimum version of the Cloud Services plugin 2.0 Innovation, select
    Panorama
    Cloud Services
    Configuration
    .
    A banner displays, requesting that you upgrade and install to the Enterprise DLP plugin for an improved DLP experience.
  2. After you upgrade, if you have existing data patterns and data filtering profiles that you use for Enterprise DLP on Prisma Access, the migration process moves them to the following locations in Panorama:
    • Data patterns move from
      Objects
      Custom Objects
      Data Patterns
      to
      Objects
      DLP
      DLP Data Patterns
      .
    • Data filtering profiles move from
      Objects
      Security Profiles
      Data Filtering
      to
      Objects
      DLP
      DLP Data Filters
      .
    • You do not have to verify that the Panorama and Prisma Access belong to the same CSP account; you have already associated the Panorama serial number with the CSP account when you installed Prisma Access.
    • You do not have to activate the Enterprise DLP plugin on Prisma Access. However, if you have managed firewalls, you should complete the steps to enter the auth code for the target managed firewalls.
    After the migration process completes, a banner displays indicating that the plugin was installed.

Recommended For You