Onboarding checklist for DLP - Administrator Guide - Cortex XSIAM - Cortex - Cortex CLOUD - Cortex - Security Operations

Cortex Cloud Runtime Security Documentation

Product
Cortex Cloud Application Security > Cortex CLOUD
License
Cloud Runtime Security
Creation date
2024-12-24
Last date published
2026-06-10
Category
Administrator Guide

We recommend following these steps to ensure all requirements for setting up DLP are met, protecting sensitive data, and maintaining compliance with your organization's standards.

Step

Details

See More

Step 1. Install the DLP browser extension

Install the DLP browser extension on your endpoint. This extension works with the DLP agent to monitor and enforce security policies on web-based activities.

See topic

Step 2. Check permissions for user roles

Refer to "Users and Roles" and verify that the settings for Data Security Admin are set up to create, manage, and remove data-in-motion rules.

See topic

Step 3. Add applications

Add local and web applications that can be added to the application group when selecting source and destination in the data-in-motion rule.

See topic

Step 4. Add application groups

Create application groups for the source and destination in the data-in-motion rule.

See topic

Step 5. Define DLP rules

Rules that control sensitive data transfers based on context, such as source, destination, and data classification. They enforce actions like block, allow, or report.

See topic

Step 6. Configure endpoint DLP settings

Configure your endpoint DLP settings to define the DLP setup for your organization.

See topic

Step 7. DLP status in all endpoints

View the installation of the extension status and the DLP status on each endpoint.

See topic

Step 8. Review threats

Track and investigate the issues triggered when a data-in-motion rule is violated

See topic