: Known Issues in Enterprise Data Loss Prevention (DLP) Plugin 1.0.5
Focus
Focus

Known Issues in Enterprise Data Loss Prevention (DLP) Plugin 1.0.5

Table of Contents

Known Issues in Enterprise Data Loss Prevention (DLP) Plugin 1.0.5

Known Issues for Enterprise DLP plugin 1.0.5.
See Addressed Issues in Enterprise Data Loss Prevention (DLP) Plugin 1.0.5 for a list of issues addressed in Enterprise DLP plugin 1.0.5.

WIF-523

This issue is addressed in PAN-OS 10.2.2.
Managed firewalls leveraging Enterprise DLP erroneously display as
not licensed
, even though the firewall is successfully licensed, when you enter the following command in the firewall CLI.
admin>
show ctd-agent status security-client
This issue is observed only when you initially activate the DLP license on the managed firewall and before you push the Enterprise DLP configuration from the Panorama management server for the first time.
Workaround:
Finish setting up and configuring Enterprise DLP.
This requires you to commit and push the Enterprise DLP configuration to your managed firewall leveraging Enterprise DLP which restores the correct license state on the managed firewall.

PLUG-10530

This issue is addressed in Enterprise DLP version 1.0.8.
On the Panorama management server, the Enterprise DLP data patterns (
Objects
DLP
Data Filtering Patterns
) and data filtering profiles (
Objects
DLP
Data Filtering Profiles
) may not display after reboot of Panorama.
Workaround:
Reset the Enterprise DLP plugin to display the Enterprise DLP data filtering patterns and data filtering profiles.
  1. Reset the Enterprise DLP plugin.
    admin>
    request plugins dlp reset
  2. Commit and push to your managed firewalls leveraging Enterprise DLP.
    1. Select
      Commit
      Commit to Panorama
      and
      Commit
      .
    2. (
      Best Practices
      ) Push to your managed firewalls leveraging Enterprise DLP.
      1. Select
        Commit
        Push to Devices
        and
        Edit Selections
        .
      2. Select
        Device Groups
        and
        Include Device and Network Templates
        .
      3. Click
        OK
      4. Push
        to your managed firewalls that are leveraging Enterprise DLP.

PLUG-9811

This issue is addressed in Enterprise DLP 3.0.6.
Creating a new data profile from the Panorama management server CLI fails.
Workaround:
Create a new data profile from the Panorama web interface.

PLUG-9323

This issue is addressed in Enterprise DLP version 1.0.6 and 3.0.2.
On the Panorama management server, the Secondary Pattern for a data filtering profile (
Objects
DLP
Data Filtering Profiles
) is not displayed for the data filtering profile is successfully created and pushed to managed firewalls.

PLUG-6254

Firewalls leveraging Enterprise Data Loss Prevention (DLP) do not display the Enterprise DLP data filtering profiles (
Objects
DLP
Data Filtering Profiles
) or Enterprise DLP Settings (
Device
Setup
DLP
), and cannot be overridden locally on the firewall.

PLUG-6145

On the Panorama management server, you cannot create an admin role (
Panorama
Admin Roles
) to control access to Enterprise Data Loss Prevention (DLP) filtering settings and snippet configuration (
Device
Setup
DLP
).

PAN-157371

This is addressed in Enterprise DLP version 3.0.1
Firewalls leveraging Enterprise Data Loss Prevention (DLP) do not display the on-device Help for the DLP Settings (
Device
Setup
DLP
).

PAN-144897

Enterprise Data Loss Prevention (DLP) data profile
Thread ID/Name
filter is not available when you configure a custom report (
Manage
Manage Custom Reports
) on the Panorama management server or locally on a firewall leveraging Enterprise DLP.

Recommended For You