Different between Data Filtering and Enterprise DLP

JoeKwok — Fri, 13 May 2022 11:24:26 GMT

I am a bit confuse the "Data Filtering" and

Is it "Data Filtering" is one of the function under "Threat Prevention Subscriptions"?

Then what is the ?

Can I still use the "Data Filtering" without " Subscriptions"?

If I purchase " Subscriptions", can I used it in PA firewall directly without Panorama?

The main different between "Data Filtering" and , is it local based filtering vs cloud analysis based filtering?

When I using , will it upload my traffic file to PA-Cloud for analysis?

Re: Different between Data Filtering and Enterprise DLP

PavelK — Fri, 13 May 2022 22:31:02 GMT

Thank you for the post @JoeKwok

Enterprise DLP is a separate product that goes much beyond traditional Data Filtering profile in Firewall. Enterprise DLP is a cloud based service that can integrate with Firewalls, Prisma Access, Prisma Cloud. What Enterprise DLP is aiming to do is to provide a single DLP platform a across all products/platforms/workloads.

You can configure and run Data Filtering profile on the Firewall without Enterprise DLP. With Enterprise DLP you would gain a benefit of Advanced Data Filtering profile that has pre-defined a huge list of data patterns + all the cloud based analytics, however if you have only Firewall and no other product, then it might be overkill.

Regarding your question whether Data Filtering is a part of Threat Prevention Subscription. All of my production Firewalls are running Threat Prevention, so personally I would not know, however I just looked into one of my lab Firewall that has no Threat Prevention license (only support is activated) and I can configure a Data Filtering profile and pull up all pre-defined Data Patterns, so I do not think that Threat Prevention license is a must to get Data Filtering up and running.

Regarding your question whether Enterprise DLP requires Panorama, the answer is yes, one of the pre-requisite with Enterprise DLP is to have Firewall running at least 10.0.2 and be managed by Panorama.

If you are seriously considering what option to choose, I would recommend to request demo of Enterprise DLP and ideally get a trial to get more hands on test scenarios of data leak to see it is worth to invest.

Kind Regards

Pavel

topic Re: Different between Data Filtering and Enterprise DLP in Enterprise Data Loss Prevention Discussions

Different between Data Filtering and Enterprise DLP

Re: Different between Data Filtering and Enterprise DLP