Upload an Encrypted EDM Data Set to the DLP Cloud Service
Focus
Focus
Enterprise DLP

Upload an Encrypted EDM Data Set to the DLP Cloud Service

Table of Contents

Upload an Encrypted EDM Data Set to the DLP Cloud Service

Upload an encrypted Exact Data Matching (EDM) data set to the Enterprise Data Loss Prevention (E-DLP) cloud service.
Where Can I Use This?What Do I Need?
  • NGFW (Managed by Panorama or Strata Cloud Manager)
  • Prisma Access (Managed by Panorama or Strata Cloud Manager)
  • Enterprise Data Loss Prevention (E-DLP) license
    Review the Supported Platforms for details on the required license for each enforcement point.
Or any of the following licenses that include the Enterprise DLP license
  • Prisma Access CASB license
  • Next-Generation CASB for Prisma Access and NGFW (CASB-X) license
  • Data Security license
Upload encrypted Exact Data Matching (EDM) data sets to the Enterprise Data Loss Prevention (E-DLP) cloud service using the EDM CLI application. The EDM CLI application supports a single EDM data set upload at a time.
  1. Create and encrypted EDM data set.
  2. Configure Connectivity to the DLP Cloud Service if not already configured.
    If you’ve already configured the upload_config.properties file, navigate to the package-edm-secure-cli-<version>-<platform> directory where the upload_config.properties is located to modify the dataset_name value for the encrypted EDM data set you want to upload.
  3. Obtain the path for the encrypted EDM data set you created.
    In the package-edm-secure-cli-<version>-<platform> directory, open the folder containing the EDM data set and right-click the output.zip file to view the Properties. Copy the file Location.
  4. Open the terminal and navigate to the package-edm-secure-cli-<version>-<platform> directory where the EDM CLI application is located.
  5. Upload the encrypted EDM data set to the DLP cloud service.
    • Windows
      admin: edm-secure-cli.bat upload --dataset-zip-file <outpit.zip-file-location>
    • Linux
      admin: ./edm-secure-cli.sh upload --dataset-zip-file <outpit.zip-file-location>
  6. Verify that the EDM data set is uploaded to the DLP cloud service successfully.
    A progress bar and success message are displayed to notify you whether the upload is successful.
  7. Monitor the upload status of the DLP data set.
    The time it takes for an EDM data set uploaded to DLP cloud service to be available on Strata Cloud Manager depends on the EDM data set size and internet connectivity speed. For example, a 4GB EDM data set upload typically takes about 30 minutes to display on Strata Cloud Manager and be usable in an advanced data profile.
    1. Log in to Strata Cloud Manager
    2. Select ManageConfigurationData Loss PreventionDetection MethodsExact Data Matching.
    3. The EDM data set upload is complete when the Indexing Status column displays Complete.