Edit the Enterprise DLP Non-File Data Filtering Settings

Log in to the Panorama web interface.
Select
Device
Setup
DLP
and select the
Template
associated with the managed firewalls using
Enterprise DLP
.
Edit the Non-File Data Filtering Settings.
Verify that
Enable Non File DLP
is checked (enabled).
Non-File DLP is enabled by default when you install Panorama plugin for
Enterprise DLP
3.0.1.
Specify the
Max Latency (sec)
to configure the allowable time for non-file data uploads to determine the allowable time before an action is taken by the firewall.
Specify the
Action on Max Latency
(
Allow
or
Block
) the firewall takes if no verdict was received for a non-file traffic data upload due to the upload time exceeding the configured
Max Latency
.
Selecting
Block
applies only to Enterprise DLP data filtering profiles configured to block non-file data. This setting doesn’t impact
Enterprise DLP
filtering profiles configured to alert when traffic containing sensitive data is scanned.
Specify the
Min Data Size (B)
to enforce a minimum size for non-file data to be scanned by the DLP cloud service.
Specify the
Max Data Size (KB)
to enforce a maximum size for non-file data to be scanned by the DLP cloud service.
Specify the
Action on Data File Size
(
Allow
or
Block
) the firewall takes if no verdict was received for a non-file traffic data upload due to the traffic data size being larger than the configured
Max Data Size
.
Selecting
Block
applies only to Enterprise DLP data filtering profiles configured to block non-file data. This setting doesn’t impact
Enterprise DLP
data filtering profiles configured to alert when traffic containing sensitive data is scanned.
Check (enable)
Log Data Not Scanned
to generate an alert in the data filtering log when non-file data can’t be scanned by the DLP cloud service.
Click
OK
to save your configuration changes.

Edit the Enterprise DLP Action on Error Setting to configure the action the firewall takes if any error is encountered during non-file traffic data upload.
Commit and push your configuration changes to your managed firewalls using
Enterprise DLP
.
While a performing a
Commit and Push
is supported, it isn’t recommended for
Enterprise DLP
configuration changes and requires you to manually select the impacted templates and managed firewalls in the Push Scope Selection.
Select
Commit
Commit to Panorama
and
Commit
your configuration changes.
Select
Commit
Push to Devices
and
Edit Selections
.
Select
Device Groups
and
Include Device and Network Templates
.
Click
OK
.
Push
your configuration changes to your managed firewalls.