DLP on PAN-OS Firewalls

nfrench87 — Fri, 13 Oct 2023 16:02:18 GMT

Question about the DLP on the NGFW's. I have a customer that's interested in enabling the feature but it looks like this is a cloud based DLP (reports back to Palo Alto's cloud and you manage the DLP features from the cloud), is that correct?

Locally there's some Data Filtering options that can be used but the DLP option is the Enterprise Data Loss Prevention (DLP) described here https://live.paloaltonetworks.com/t5/blogs/new-pan-os-10-0-2-features-dlp-amp-sd-wan-for-7000-series/ba-p/360779 and https://docs.paloaltonetworks.com/enterprise-dlp/enterprise-dlp-admin/set-up-enterprise-data-loss-prevention/set-up-the-enterprise-dlp-plugin-on-panorama/install-the-enterprise-data-loss-prevention-dlp-plugin-panorama

Re: DLP on PAN-OS Firewalls

LAYER_8 — Fri, 01 Dec 2023 02:11:25 GMT

Sorta.

It is cloud-managed, and requires Panorama. So Panorama is basically the broker to Hawkeye (DLP service) where all your configurations live and the analysis occurs. Panorama distributes the file data patterns (identifying the kinds of things you want to scan for) and the data profiles (actions that are taken as a result), but the actual analysis and verdict are done in the cloud and sent back to the box.

https://docs.paloaltonetworks.com/enterprise-dlp/enterprise-dlp-admin/enterprise-dlp-overview/about-enterprise-data-loss-prevention#id17fe8db1-0eea-41c7-bfdb-629f4eec5574

topic DLP on PAN-OS Firewalls in Next-Generation Firewall Discussions

DLP on PAN-OS Firewalls

Re: DLP on PAN-OS Firewalls