Create a Guardrail
Focus
Focus
Prisma AIRS

Create a Guardrail

Table of Contents


Create a Guardrail

Create a Basic or PRO guardrail in AI Gateway to inspect LLM requests and responses for sensitive data, prompt injection, or policy violations.
Where Can I Use This?What Do I Need?
  • Prisma AIRS AI Gateway (Americas region)
  • AI Gateway activated
  • A routing configuration to attach the guardrail to
Guardrails are created in Strata Cloud Manager and assigned a pg- prefixed ID. After creation, you reference the guardrail in a routing configuration's before_request_hooks or after_request_hooks array. This procedure covers Basic and PRO guardrails. For the Prisma AIRS Partner guardrail, see Configure the Prisma AIRS Guardrail.
  1. In Strata Cloud Manager, select Security ServicesPolicies & ProfilesGuardrails and click Add Guardrail.
  2. In Guardrail Name, enter a descriptive name.
  3. For Guardrail Type, choose Basic or PRO.
  4. Select the checks you want to enable for this guardrail.
    For a PRO guardrail, available checks include No PII, Content Moderation, and Topic Control. For No PII, you can choose whether violations result in a deny action or in redaction of the detected values.
  5. In the Actions tab, for On Failure, choose Deny to block the request when the guardrail fires, or choose Log Only to allow the traffic and record the violation without blocking.
  6. Click Save and note the pg- prefixed ID shown in the guardrail list.
  7. Add the guardrail to a routing configuration by editing the configuration's JSON and adding the guardrail ID to before_request_hooks (to inspect requests before they reach the provider) or after_request_hooks (to inspect responses before they reach the caller):
    { "before_request_hooks": [ { "id": "<pg_guardrail_id>" } ], "after_request_hooks": [ { "id": "<pg_guardrail_id>" } ] }
  8. Click Commit to apply the configuration.