: Known Issues in Enterprise DLP Plugin 3.0.2
Focus
Focus

Known Issues in Enterprise DLP Plugin 3.0.2

Table of Contents

Known Issues in Enterprise DLP Plugin 3.0.2

Known issues in Enterprise DLP Plugin 3.0.2

WIF-864

This issue is addressed in PAN-OS 10.2.3-h2.
File uploads using HTTP/2 get erroneously blocked when traffic matches a data profile match criteria and the Action is configured to
Alert
.

PLUG-14534

This is addressed in Enterprise DLP plugin 4.0.3 and 3.0.7.
On the Panorama management server, the Enterprise DLP plugin fails to complete post commit tasks and causes all commits (
Commit
Commit to Panorama
) to get stuck at 99%.

PLUG-14201

This is addressed in Enterprise DLP plugin 3.0.7, 4.0.3, and 5.0.1.
The Panorama management server is unable to a generate report if a data filtering log (
Monitor
Logs
Data Filtering
) with Report ID of
0
for a DLP incident. A DLP Incident has a Report ID of
0
if the DLP cloud service was unable to scan the file.

PLUG-13729

This is addressed in Enterprise DLP plugin 4.0.3 and 5.0.1.
The Panorama management server is unable to synchronize new data profiles (
Objects
DLP
Data Filtering Profiles
) from the DLP cloud service.

PLUG-13111

This issue is addressed in Enterprise DLP 3.0.6.
On the Panorama management server, the list of predefined URL categories are not displayed for a data profile configured for non-file inspection (
Objects
DLP
Data Filtering Profiles
<select a data profile>
URL Category List Excluded From
).

PLUG-12430

This issue is addressed in PAN-OS 10.2.4-h3 and Enterprise DLP plugin 3.0.5.
On the Panorama management server, Enterprise Data Loss Prevention (E-DLP) allows you to create multiple data filtering profiles (
Objects
DLP
Data Filtering Profiles
) with the same
Name
.

PLUG-11447

On the Panorama management server, data filtering profiles (
Objects
DLP
Data Filtering Profiles
) with the
.gzip
file type specified do not display after you install the latest Apps & Threats dynamic update version (
Panorama
Device Deployments
Dynamic Updates
). This results in commit failures if the data filtering profile is associated with a Security policy rule (
Policies
Security
).
Workaround:
If installing the latest Apps & Threats dynamic update is required, remove the impacted data filtering profiles from Security policy rules or modify the specified file types.

PLUG-11851

On the Panorama management server, an outdated default DLP block response page is displayed when traffic matches a data filtering profile with the Action set to
Block
when leveraging Enterprise DLP.

PLUG-9811

This issue is addressed in Enterprise DLP 3.0.6.
Creating a new data profile from the Panorama management server CLI fails.
Workaround:
Create a new data profile from the Panorama web interface.

PLUG-6254

Firewalls leveraging Enterprise Data Loss Prevention (DLP) do not display the Enterprise DLP data filtering profiles (
Objects
DLP
Data Filtering Profiles
) or Enterprise DLP Settings (
Device
Setup
DLP
), and cannot be overridden locally on the firewall.

PLUG-6145

On the Panorama management server, you cannot create an admin role (
Panorama
Admin Roles
) to control access to Enterprise Data Loss Prevention (DLP) filtering settings and snippet configuration (
Device
Setup
DLP
).

PAN-206066

This issue is addressed in Enterprise DLP version 3.0.3.
On the Panorama management server, data pattern (
Objects
DLP
Data Filtering Patterns
) match criteria and data filtering profiles (
Objects
DLP
Data Filtering Profiles
) that contain the word
fail
or
failure
cause all data patterns and data filtering profiles to not display.
Workaround:
Remove any instance of the words
fail
or
failure
from all your data patterns and data filtering profiles.

PAN-144897

Enterprise Data Loss Prevention (DLP) data profile
Thread ID/Name
filter is not available when you configure a custom report (
Manage
Manage Custom Reports
) on the Panorama management server or locally on a firewall leveraging Enterprise DLP.

Recommended For You