First Look at New and Updated Data Filtering Options

In previous release versions, a single data pattern object could contain different types of data patterns, including credit card and social security number patterns and custom patterns. Now, data pattern objects can be one of three types:
  • (
    New and Improved
    )
    Predefined Pattern
    —Filter for credit card and social security numbers (with or without dashes) using predefined patterns. While the option to filter for credit card and social security numbers existed in previous release versions, the new predefined patterns make this feature easy to use.
  • Regular Expression
    —Filter for a string of characters.
  • (
    New and Improved
    )
    File Properties
    —Filter for file properties and values based on file type. While the option to use regular expression patterns to filter for file properties is supported with earlier release versions, the new built-in file property options make this feature easy to use.
    nfg-80-data-pattern.png
Additionally, data pattern objects configured before the upgrade to PAN-OS 8.0 are preserved and are enforced with your security policy just as they were before the upgrade; however, the migrated data pattern objects are displayed differently. A single data pattern object that contains more than one type of pattern becomes two separate data pattern objects in PAN-OS 8.0:
8.0-data-pattern-upgrade.png
In the example above, the PAN-OS 7.1 data pattern object pattern1 includes credit card and social security number patterns and regular expression patterns. After the upgrade to PAN-OS 8.0, the original data pattern object is replaced by two separate objects based on the data pattern types: a predefined pattern object with the name pattern1-P and a regular expression object with the name pattern1-R.
A
P
added to the end of the data pattern name indicates a predefined data pattern that was configured before the upgrade to PAN-OS 8.0, and an
R
added to the end of the pattern name indicates a regular expression data pattern that was configured before the upgrade to PAN-OS 8.0.

Related Documentation