>
    Strata Copilot
    Edit the Shadow Data Discovery Settings
    Focus
    Download PDF
    Focus
    1. Home
    2. Enterprise DLP
    3. Edit the Shadow Data Discovery Settings
    Download PDF
    Enterprise DLP

    Edit the Shadow Data Discovery Settings

    Table of Contents

    Edit the Shadow Data Discovery Settings

    Configure the Shadow Data Discovery settings to control how Enterprise Data Loss Prevention (E-DLP) discovers and categorizes unstructured data in your environment.
    Where Can I Use This?What Do I Need?
    Strata Cloud Manager
    • Data Security license
    • Enterprise DLP license
    Or any of the following licenses that include the Enterprise DLP and Data Security licenses
    • Prisma Access CASB license
    • Next-Generation CASB for Prisma Access and NGFW (CASB-X) license
    • Data Security license
    Contact Palo Alto Networks to enable Shadow Data Discovery on your tenant.
    Modify the Shadow Data Discovery settings after you start a Shadow Data Discovery scan to update the file volume range and data channels Enterprise Data Loss Prevention (E-DLP) inspects for shadow data. These settings control how Enterprise DLP discovers and categorizes shadow data in your environment.
    Changes to the Shadow Data Discovery settings take effect whenever Data Security (SaaS API) rescans onboarded apps and do not apply retroactively.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationData Loss PreventionSettingsShadow Data Discovery.
    3. Review the enforcement Channels you want Enterprise DLP to inspect and categorize.
      Enterprise DLP supports shadow data file categorization for the following enforcement channels.
      • SaaS API—Enterprise DLP inspects files at rest for supported SaaS apps onboarded to Data Security.
    4. Save Changes.

    © 2026 Palo Alto Networks, Inc. All rights reserved.