Create an AI Security Profile

Table of Contents

Create an AI security profile to enable AI application protection, AI data protection, and AI model protections to your security policy rules.

Where Can I Use This?	What Do I Need?
Create AI Security Profile	Deploy AI Runtime Security: Network Intercept in Public Clouds

An AI security profile helps you configure specific security settings for:

AI application protection with URL categorization.
AI model protection to protect your AI models against threats such as prompt injections.
AI data protection to protect against sensitive data leakage to and from AI models.

Log in to Strata Cloud Manager.
Navigate to Manage → Configuration → NGFW and Prisma Access → Security Services → AI Security.
Select the Configuration Scope as Global or limit it to your AI security profile.
Select AI Security → Add Profile.
Enter a Name and a Description.
Add Model Group for customized protections. See Create Model Groups for Customized Protections.
For example, a model group with URL categorization and prompt injection alert settings is attached to the following security profile for a target AI model. You can attach a security policy as a zone or a DAG:
- For zone-based security, follow the use case on how to Create Traffic Objects for Zone-Based Security using specific clusters to monitor the ingress and east-west traffic. Attach this zone to a security policy rule to enforce policies on the AI traffic sourced from this zone and the traffic objects within this zone.
- For protecting the source AI applications, use Dynamic Address Groups in Policy and reference these DAGs in the security policy rule.
Under Advanced Settings:
1. Set the Max Inline Latency for AI Security detection runtime latency (# seconds) for traffic that hits a specific AI security profile.
2. The Inline Timeout Action.
Create.