Create and Associate a Deployment Profile for AI Runtime Security: API Intercept

Table of Contents

AI Runtime Security: API Intercept Overview

Manage Deployment Profile in the Customer Support Portal (CSP)

Create and Associate a Deployment Profile for AI Runtime Security: API Intercept

Create and Associate a Deployment Profile in Customer Support Portal (CSP) for AI Runtime Security: API Intercept.

This page helps you create a deployment profile for AI Runtime Security: API intercept in the Customer Support Portal (CSP) and associate a deployment profile to your tenant service group (TSG).

This helps to complete the onboarding process and generate a Strata Cloud Manager instance with AI Runtime Security: API intercept.

Where Can I Use This?	What Do I Need?
AI Runtime Security	AI Runtime Security Licenses (BYOL)

Before you begin, ensure you have a credit pool available for Software NGFW Credits, as you need these credits for licensing the AI Runtime Security: API intercept. Your subscription includes Strata Cloud Manager, Enterprise DLP, and Strata Logging Service (SLS).

Log in to the Palo Alto Customer Support Portal (CSP).
Navigate to Products > Software/Cloud NGFW Credits.
Locate your credit pool and click Create Deployment Profile.
Under Select firewall type, select AI Runtime Security (API) .
Select Next.
Enter a Profile Name.
Enter the Max API calls per day (a minimum of 10 records and a maximum of 1000).

During the promotional period, 1,000 API calls are allowed per day.
Calculate Estimated Cost.

This consumes zero credits as part of the complimentary offer expiring on February 17, 2025.

The credits bundle the Strata Cloud Manager Pro, Enterprise DLP, and Strata Logging Service (SLS).
Click Create Deployment Profile.

This takes you to the Software NGFW Credits page in the CSP.

Next, you associate this deployment profile with a tenant service group (TSG) as explained in the section below.

Associate a Deployment Profile to a Tenant Service Group (TSG)

Associate the deployment profile auth code with the Tenant Service Group (TSG).

The Hub creates an instance for Strata Cloud Manager Pro, DLP, and SLS.

Before you begin, create a deployment profile for AI Runtime Security: API Intercept in the CSP.

Log in to Palo Alto Networks Customer Support Portal (CSP).
Navigate to Products → Software/Cloud NGFW Credits.
Locate the credit pool you used to create the deployment profile and click Details.
Locate your AI Runtime Security API intercept deployment profile and click Finish Setup.
This takes you to the Hub page to activate the subscriptions based on your deployment profile.
Select the Customer Support Account used to create your deployment profile from the drop-down list.
Select a Tenant or create a new one (Click the "+" icon. Enter a Name and click Ok).
Use separate tenants for enabling AI Runtime Security: Network intercept and AI Runtime Security: API intercept.
Select a Region.
We support the Americas region only.
Select the Deployment Profile you created previously and click Done.

The profile shows the Enterprise DLP, Strata Cloud Manager Pro, and AI Runtime Security API subscriptions.

If you have any existing deployment profiles associated with your tenant, don't uncheck them. Doing so will disassociate them from the tenant.
Select a Data Loss Prevention (DLP) instance. If you don't have one, select Create New.
Agree to the Terms and Conditions.
Click Activate to activate the deployment profile.
The activation takes you to the Hub page that shows the services that are activated. The Hub creates instances for:
1. Strata Cloud Manager Pro (Cloud Management, Strata Cloud Manager, and ADEM SLS)
2. Enterprise DLP
3. Strata Logging Service (SLS)
Verify the TSG association completion in the Hub:
- Navigate to Common Services → Tenant Management.
- Select your tenant and switch to Deployment Profiles.
- Confirm that the Profile Association Status is Complete.
This completes the provisioning. Next, activate the auth code to create an API key and an AI security profile in the Strata Cloud Manager.