Create a Deployment Profile for Prisma AIRS AI Skill Security

Table of Contents

Learn how to create a deployment profile for Prisma AIRS AI Skill Security.

Where Can I Use This?	What Do I Need?
Prisma AIRS (AI Skill Security)	No License required for preview

Use this information to deploy a tenant for AI Skill Security. Consider the following when creating a deployment profile:

You need an active deployment profile and have a proper Identity & Access to view the AI Skill Security and its features in Prisma AIRS.

Creating a deployment profile for AI Skill Security includes the following steps:

Create a Deployment Profile for Prisma AIRS AI Skill Security in the Customer Support Portal

Log in to the Palo Alto Customer Support Portal (CSP).
Navigate to ProductsSoftware/Cloud NGFW Credits.
Locate your credit pool and click Create Deployment Profile.
Under Select firewall type, expand Prisma AIRS and select AI Skill Security.
Select Next.
Enter a Profile Name.
Click Create Deployment Profile.

After creating the deployment profile, you'll associated it with a tenant.

Use the information in this section to associate a deployment profile with a tenant. Consider the following:

Once the deployment profile is created, you're provided with a link to the Palo Alto Networks Hub to associate the profile with a TSG.
You can create a new tenant (TSG), or, you can associate the profile with an existing tenant.
If a new tenant is created, a Strata Cloud Manager (SCM) instance is created; this process can take approximately 15-20 minutes to complete.
If you are using an existing tenant, a SCM instance is typically associated with it.
Because AI Skill Security is accessible for all SCM Pro users, you'll see SCM and Strata Logging Service (SLS) instances being created; these elements are part of the SCM Pro license.

To associate the deployment profile with a tenant:

In the CSP dashboard, locate your deployment profile and Finish Setup; this redirects you to the Palo Alto Networks hub.
Select the name of the CSP account in which you created the deployment profile.

If you select a new tenant, also select the region where the tenant should be created. This is referred to as the platform region. AI Skill Security determines which regions are supported.
AI Skill Security is available in US region only.
Select the deployment profile that you want to associate with the tenant.
Select None in Additional Services.
Agree to the terms, then select Activate.

Deployment Profile activation may take up to two hours. Once activated, the AI Skill Security will be visible in the Strata Cloud Manager web interface (InsightsPrisma AIRSAI Skill Security).

You're redirected to the Tenant Management page which shows the instances for the tenant.
Verify the TSG association in the Hub. To do this:
1. Navigate to Common ServicesTenant Management.
2. Select the tenant and switch to Deployment Profiles.
3. Confirm that the Profile Association Status is Complete.

Log in to the Palo Alto Customer Support Portal (CSP).
In the CSP dashboard, click on the three dots (ellipsis or overflow menu) next to your deployment profile.
Edit, delete or deactivate the deployment profile.

You can delete the deployment profile at any time. Consider the following when deleting the profile:

Ensure that there are no firewalls associated with the deployment profile; you cannot delete the profile if it is attached to an existing firewall.
Deactivate the firewall from the deployment profile first, then delete it.

Log in to the Palo Alto Customer Support Portal (CSP).
In the CSP dashboard, click on the three dots (ellipsis or overflow menu) next to the deployment profile.
If you have not yet deactivated the profile, select Deactivate Firewall.
After you have successfully deactivated the profile, select Delete.