Data Security - Endpoint DLP permissions - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-30
Category
Administrator Guide

Endpoint Data Loss Prevention (DLP) permission (under Data Security) controls the policies and configurations that govern how sensitive data is handled when it moves across endpoints.

Endpoint DLP includes Data-in-motion rules, Endpoint Applications, Endpoint Application Groups, and Endpoint DLP settings.

Notice

Requires the Data Loss Prevention (DLP) add-on plus Enterprise Runtime Security (XDR), Cortex XSIAM Enterprise, or Cortex XSIAM Premium license.