Enterprise DLP enables inspection of non-file traffic, including data entered into web forms and SaaS application text fields. It extends data protection beyond traditional file uploads to detect and prevent sensitive information such as credit card numbers from being exfiltrated through inline text input.

HIP Match Logs: Host Information Profile (HIP) Match Logs provide information about the health and compliance status of the connecting endpoint, which helps troubleshoot access issues due to client posture or security policy compliance failures.
GlobalProtect Logs: These logs are specific to the GlobalProtect VPN and provide detailed information about user connection attempts, authentication status, errors, and other VPN-specific events which are essential for diagnosing remote user access problems.

Setting both the source and destination zones to Colorado with the specified Dynamic User Group and application ensures that intrazone traffic for the Payment System is blocked.

Strata Cloud Manager (SCM) offers a cloud-based unified management plane for both NGFWs and Prisma Access, enabling consistent policy enforcement, simplified management, and AI- driven operational insights.
Strata Cloud Manager provides a single interface for unified management of NGFWs and Prisma Access, leveraging AI to optimize security operations and streamline workflows.
Unlike Panorama, which is an on-premises management solution, SCM delivers cloud-based, AI- driven capabilities for centralized oversight.

Advanced DNS Security uses a signature policy to sinkhole malicious DNS queries and prevent them from resolving.
The DNS Security service integrates with Anti-Spyware profiles, and you must configure signature policy settings to sinkhole malicious queries. This proactively stops traffic to known malicious domains.
Sinkholing ensures that DNS queries to malicious FQDNs are redirected to a safe IP, preventing compromise.