Prisma AIRS uses a bring-your-own license (BYOL) model. This means you must retrieve an authcode from the Palo Alto Networks Customer Support Portal and then apply that authcode when deploying your Prisma AIRS: Network intercept managed by Strata Cloud Manager or Panorama, and Prisma AIRS AI Runtime API

The Prisma AIRS license is funded using Software NGFW credits. To use Software NGFW credits, you must fund a credit pool. You then create a deployment profile to configure one or more Prisma AIRS AI Runtime intercepts based on the number of vCPUs per instance and the total number of instances supported by the deployment profile. All the Prisma AIRS AI Runtime Firewall and API created with a deployment profile share the same authcode.

For Prisma AIRS AI Runtime API, credit usage is calculated in monthly tokens (billions) where each token is equal to four characters. At the end of each calendar month, your token quota resets.

The Prisma AIRS AI Runtime: Network intercept license includes the following AI security services.

• AI App Protection
• AI Model Protection
• AI Data Protection

Additionally, the Prisma AIRS AI Runtime Security (Instance) includes the following cloud-delivered security services.

The Prisma AIRS AI Runtime Security (API) license includes the following Prisma AIRS AI Runtime services:

Activating the Prisma AIRS AI Runtime: API intercept deployment in the Customer Support Portal enables the above services on the Hub. The Hub creates instances for the Strata Cloud Manager instance including, the Prisma AIRS AI Runtime API feature.

For details, refer to Create a Deployment Profile for Prisma AIRS AI Runtime API.