This page walks you through the steps to deploy Security Lifecycle Review (SLR) in
your cloud environment using the deployment workflow in Strata Cloud Manager.
| Where Can I Use This? | What Do I Need? |
|---|
- Prisma AIRS AI Runtime Security Risk
Assessment in Azure
|
|
The Security Lifecycle Review (SLR) report gives you a comprehensive view of
application workloads, traffic flows, and threats detected across your Azure cloud
infrastructure:
| Enhancement | Details |
| Multi-cloud threat coverage | SLR covers AWS and Azure — previously only AWS packet mirror
mode was supported. |
| Inline and monitor-mode support | Reports include data from AI Runtime firewalls deployed
inline or in monitor mode. |
| VM-Series inline support | VM-Series firewalls deployed inline are included in the
report. |
| Multi-account report structure | Reports are broken down per cloud and per account for
customers with multiple accounts. |
| Threats blocked vs. detected | Inline firewalls exporting logs to Strata Logging Service
(SLS) now distinguish between blocked and detected
threats. |
| Protected vs. monitored traffic | Traffic inspected by inline firewalls is labeled
Protected instead of Monitored. |
When viewing SLR reports for Azure, consider the following:
- Supported regions. East US, East US 2, West US, West US 2, Central
US, North Central US, South Central US, West Central US, Canada Central,
Canada East, UK South, North Europe, West Europe
- Supported VM types:
- D-series only — Dsv3, Dsv4, Dsv5
- B-series is notsupported
- Post-deployment VM restart required:
- All app VMs must be restarted after FW deployment for VTAP
activation
- Allow ~5 minutes after restart for traffic mirroring to begin
- Dual-NIC VMs:
- Default route must point to the dataplane (dp) subnet gateway
- Single-NIC VMs require no route change
- Throughput: ~1 Gbps per VTAP
- Deployment Modes:
- Dedicated (Per App VNet)— single-phase deployment, FW + VTAP
deployed together inside the app VNet
- Centralized— two-phase deployment (security project first,
then application project); destroy in reverse order
- Known Limitations:
- No cross-region mirroring
- 13 VTAP-supported regions only (listed above)
