AI Access Security Licenses
Focus
Focus
AI Access Security

AI Access Security Licenses

Table of Contents

AI Access Security Licenses

Review the AI Access Security licenses to understand which license is right for you.
Where Can I Use This?What Do I Need?
  • NGFW (Managed by Panorama or Strata Cloud Manager)
  • Prisma Access (Managed by Panorama or Strata Cloud Manager)
One of the following:
  • AI Access Security license
  • CASB-PA license
  • CASB-X license
Review the available AI Access Security licenses to begin safely adopting and controlling access to generative AI (GenAI) applications on your network.
  • AI Access Security License
    The AI Access Security license is a standalone license. It includes the following three types of license:
    • AI Access Security EVAL—Evaluation license for AI Access Security. If you have the EVAL license active, you must convert the evaluation license to a production license after the evaluation period has ended to continue safely controlling access to and safely adopting GenAI apps.
    • AI Access Security LABAI Access Security license specific for your lab environments. This license isn't intended for a production environment.
    • AI Access Security—Production license for AI Access Security.
  • CASB-PA and CASB-X
    AI Access Security is included by default with both the CASB-PA and CASB-X licenses. No additional action is needed to activate AI Access Security. You can begin using AI Access Security to safely adopt GenAI apps after activating either of these licenses.

What's Included with an AI Access Security License?

What's included with AI Access Security depends on whether other licenses are active on the tenant.
The included AI Access Security functionality is dependent on the PAN-OS or dataplane version currently running on the NGFW or Prisma Access tenant. Refer to the Setup Prerequisites for more information on what functionality is included.
  • AI Access Security only, or AI Access Security and SaaS Security Inline Licenses
    This applies to NGFW or Prisma Access managed by Panorama or Strata Cloud Manager when only the AI Access Security license is active or if AI Access Security and SaaS Security Inline licenses are active.
    PAN-OS or Dataplane Version
    NGFW and Prisma Access (Managed by Panorama or Strata Cloud Manager )
    11.2.2-h1 and later
    Prisma Access 5.1 Innovation
    • Visibility into over 600 GenAI apps delivered through dynamic content updates and App-ID Cloud Engine (ACE).
    • Define policy rules to control access to GenAI apps and non-GenAI apps.
    • Enterprise DLP inspection and verdict rendering for supported GenAI apps only.
      Traffic matches containing sensitive data are not forwarded to Enterprise DLP for inspection and verdict rendering for non-GenAI apps.
    • Access the Strata Cloud Manager Command Center for GenAI visibility.
    • Access the AI Access Security Activity Insights dashboard to view detailed GenAI app usage data, users, and common GenAI use cases occurring on your network.
    • Tag GenAI apps on Strata Cloud Manager to reflect whether the application is approved within your organization and for tag-based policy enforcement.
  • AI Access Security and Enterprise DLP Licenses
    This applies to NGFW or Prisma Access managed by Panorama or Strata Cloud Manager when both the AI Access Security and Enterprise DLP licenses are active.
    PAN-OS or Dataplane Version
    NGFW and Prisma Access (Managed by Panorama or Strata Cloud Manager )
    11.2.2-h1 and later
    Prisma Access 5.1 Innovation
    • Visibility into over 600 GenAI apps delivered through dynamic content updates and App-ID Cloud Engine (ACE).
    • Define policy rules to control access to GenAI apps and non-GenAI apps.
    • Enterprise DLP inspection and verdict rendering for supported GenAI and non-GenAI apps.
    • Access the Strata Cloud Manager Command Center for GenAI visibility.
    • Access the AI Access Security Activity Insights dashboard to view detailed GenAI app usage data, users, and common GenAI use cases occurring on your network.
    • Tag GenAI apps on Strata Cloud Manager to reflect whether the application is approved within your organization and for tag-based policy enforcement.
  • CASB-PA and CASB-X Licenses
    This applies to NGFW or Prisma Access managed by Strata Cloud Manager when the CASB-PA or CASB-X licenses are active.
    PAN-OS or Dataplane Version
    CASB-PA and CASB-X
    10.2
    11.1
    Prisma Access 5.0 Preferred and Innovation
    Prisma Access 5.1 Preferred
    • Visibility into over 600 GenAI apps delivered through dynamic content updates and App-ID Cloud Engine (ACE).
    • Define policy rules to control access to GenAI apps and non-GenAI apps.
    • Enterprise DLP inspection and verdict rendering for supported GenAI and non-GenAI apps.
    • Access the Strata Cloud Manager Command Center for GenAI visibility.
    • Access the AI Access Security Activity Insights dashboard to view detailed GenAI app usage data, users, and common GenAI use cases occurring on your network.
    11.2.2-h1 and later
    Prisma Access 5.1 Innovation
    • Visibility into over 600 GenAI apps delivered through dynamic content updates and App-ID Cloud Engine (ACE).
    • Define policy rules to control access to GenAI apps and non-GenAI apps.
    • Enterprise DLP inspection and verdict rendering for supported GenAI and non-GenAI apps.
    • Access the Strata Cloud Manager Command Center for GenAI visibility.
    • Access the AI Access Security Activity Insights dashboard to view detailed GenAI app usage data, users, and common GenAI use cases occurring on your network.
    • Tag GenAI apps on Strata Cloud Manager to reflect whether the application is approved within your organization and for tag-based policy enforcement.