Edit the Enterprise DLP Data Filtering Settings

Log in to the Panorama web interface.
Select
Device
Setup
DLP
and select the
Template
associated with the managed firewalls leveraging Enterprise DLP.
Edit the Data Filtering Settings
Specify the
Max Latency (sec)
for a file upload for an action is taken by the firewall.
For inspection of files greater than 20MB, Palo Alto Networks recommends setting the max latency to greater than
60
seconds.
Specify the
Action on Max Latency
(
Block
or
Allow
) the firewall takes if no verdict was received for a file upload due to the upload time exceeding the configured
Max Latency
.
Selecting
Block
applies only to Enterprise DLP data filtering profiles configured to block files. This setting does not impact Enterprise DLP filtering profiles configured to alert when traffic containing sensitive data is scanned.
Specify the
Max File Size (MB)
to enforce a maximum file size for files stored in the DLP cloud service.
Specify the
Action on Max File Size
(
Block
or
Allow
) the firewall takes if no verdict was received for a file upload due to the file size being larger than the configured
Max File Size
.
Selecting
Block
applies only to Enterprise DLP data filtering profiles configured to block files. This setting does not impact Enterprise DLP filtering profiles configured to alert when traffic containing sensitive data is scanned.
Check (enable)
Log Files Not Scanned
to generate an alert in the data filtering log when a file cannot be scanned to the DLP cloud service.
Click
OK
to save your configuration changes.

Edit the Enterprise DLP Action on Error Setting to configure the action the firewall takes if any error is encountered during non-file traffic data upload.
Commit and push your configuration changes to your managed firewalls leveraging Enterprise DLP.
While a performing a
Commit and Push
is supported, it is not recommended for Enterprise DLP configuration changes and requires you to manually select the impacted templates and managed firewalls in the Push Scope Selection.
Select
Commit
Commit to Panorama
and
Commit
your configuration changes.
Select
Commit
Push to Devices
and
Edit Selections
.
Select
Device Groups
and
Include Device and Network Templates
.
Click
OK
.
Push
your configuration changes to your managed firewalls.