Prisma AIRS uses a bring-your-own license (BYOL) model. This means you must retrieve an authcode from the Palo Alto Networks Customer Support Portal and then apply that authcode when deploying your Prisma AIRS: Network intercept managed by Strata Cloud Manager or Panorama, and Prisma AIRS AI Runtime: API intercept.

The Prisma AIRS license is funded using Software NGFW credits. To use Software NGFW credits, you must fund a credit pool. You then create a deployment profile to configure one or more Prisma AIRS AI Runtime intercepts based on the number of vCPUs per instance and the total number of instances supported by the deployment profile. All the Prisma AIRS AI Runtime network and API intercepts created with a deployment profile share the same authcode.

The Prisma AIRS AI Runtime: Network intercept license includes the following AI security services.

• AI App Protection
• AI Model Protection
• AI Data Protection

Additionally, the Prisma AIRS AI Runtime: Network intercept includes the following cloud-delivered security services.

The Prisma AIRS AI Runtime: API intercept license includes the following Prisma AIRS AI Runtime services:

Activating the Prisma AIRS AI Runtime: API intercept deployment in the Customer Support Portal enables the above services on the Hub. The Hub creates instances for the Strata Cloud Manager instance including, the Prisma AIRS AI Runtime API feature.

For details, refer to Create a Deployment Profile for Prisma AIRS AI Runtime: API Intercept.