There is a known issue (PAN-288025) wherein Panorama can’t centrally
manage the Prisma AIRS AI Runtime: Network
intercept image.
You can download (Panorama > Device Deployment >
Software and Check Now) a Panorama managed Prisma AIRS AI Runtime: Network intercept from
the Customer Support portal with the *.aingfw
extension; however, you can't manage it through Panorama. This is
because, the device group and template don’t connect when installing the
image.
Workaround: Download the image and manually deploy it on the firewall
directly with the web interface or PAN-OS CLI commands.