>
    Strata Copilot
    AI Agent Discovery Limitations
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma AIRS
    3. Administration
    4. Agent Discovery
    5. AI Agent Discovery Limitations
    Download PDF
    Prisma AIRS

    AI Agent Discovery Limitations

    Table of Contents

    AI Agent Discovery Limitations

    Learn about AI Agent Discovery limitations.
    Where Can I Use This?What Do I Need?
    • Prisma AIRS AI Runtime Security
    This page provides information about current limitations with AI Agent Discovery.
    Cloud ProviderAreaLimitation
    AzureRuntime interactionsAzure Model logs are not supported in this initial phase. Therefore, the system will only show static configurations (models, knowledge bases, tools) but no runtime invocation information based on logs.
    AWSVersion trackingAWS model invocation logs do not have agent version or alias information. Consequently, one agent version's interactions will be mistakenly shown for all other versions if they share the same model, tools, or knowledge bases.
    GeneralSecurity contextThe discovery system will not provide threat information before and after applying protection in this first phase of implementation.

    Additional Limitations

    This section contains information about additional limitations to consider when using AI Agent Discovery.
    Region Availability of AIRS API and AIRS Discovery
    Strata Cloud Manager (SCM) is region-specific; a region is required to deploy SCM when activating it. While deployment profiles themselves are not region-specific, once associated with a SCM tenant, they inherit the regional constraints of that tenant. Currently, there is a mismatch in regional coverage between Enterprise Agent Discovery (Network Intercept) and API Intercept:
    Enterprise Agent Discovery Supported RegionsAPI Intercept Support Regions
    United State AmericasUnited States Americas
    SingaporeSingapore
    IndiaIndia
    United KingdomGermany
    Canada
    As a result, SCM in United Kingdom and Canada will have Enterprise Agent Discovery functionality but cannot leverage API Intercept protection since API endpoints are not available in those regions.

    © 2025 Palo Alto Networks, Inc. All rights reserved.