First Look at New and Updated Data Filtering Options
In previous release versions, a single data pattern
object could contain different types of data patterns, including
credit card and social security number patterns and custom patterns.
Now, data pattern objects can be one of three types:
New and Improved
for credit card and social security numbers (with or without dashes) using
predefined patterns. While the option to filter for credit card
and social security numbers existed in previous release versions,
the new predefined patterns make this feature easy to use.
—Filter for a string of characters.
New and Improved
for file properties and values based on file type. While the option
to use regular expression patterns to filter for file properties
is supported with earlier release versions, the new built-in file
property options make this feature easy to use.
Additionally, data pattern objects configured before the upgrade
to PAN-OS 8.0 are preserved and are enforced with your security
policy just as they were before the upgrade; however, the migrated
data pattern objects are displayed differently. A single data pattern
object that contains more than one type of pattern becomes two separate
data pattern objects in PAN-OS 8.0:
In the example above, the PAN-OS 7.1 data pattern object pattern1
includes credit card and social security number patterns and regular
expression patterns. After the upgrade to PAN-OS 8.0, the original
data pattern object is replaced by two separate objects based on
the data pattern types: a predefined pattern object with the name
pattern1-P and a regular expression object with the name pattern1-R.
added to the end of the data
pattern name indicates a predefined data pattern that was configured
before the upgrade to PAN-OS 8.0, and an
to the end of the pattern name indicates a regular expression data
pattern that was configured before the upgrade to PAN-OS 8.0.