Introducing AI Access Security

Generative AI (GenAI) applications are AI apps capable of generating text, images, videos, and other data in response to user prompts, continuously learning from inputs. While offering opportunities, their usage presents new security dangers: ensuring employees don't expose sensitive or proprietary data to GenAI apps.

Palo Alto Networks introduced AI Access Security to enable businesses to safely adopt GenAI apps by mitigating risks associated with data leakage in prompts and malicious content in responses. It includes:

• An extensive dictionary of GenAI apps to identify usage.
• Contextual, fine-grained access control policy rules to prevent exfiltration of sensitive data .
• Detailed monitoring capabilities to filter usage by apps, users, and use cases, enabling targeted policy rule creation .

AI Access Security follows core principles for safe GenAI leverage:

• Identify and Control GenAI Apps: Provides visibility into usage, bespoke risk scores, and policy enforcement for sanctioned and shadow AI apps.
• Comprehensive Visualization and Reporting: Managed via Strata Cloud Manager for unified visibility, with detailed dashboards on usage trends, users, data transfers, and use cases.
• Data Protection: Integrates with Enterprise DLP for sensitive data exfiltration prevention and inspects GenAI responses for threats.

Identify and Control GenAI Apps

Provides robust tools to identify and control GenAI app usage.

• Attributes: Detailed descriptions and attributes used for calculating risk scores.
• Access Control: Create Internet Access policy rules to control access based on user groups, app categories, risk, use case, or even specific functions within an app. Control access for browser extensions, plugins, and custom GPTs.
• Enterprise Accounts and Custom GenAI Apps: Sanction enterprise account usage while blocking public access, or control access for custom apps with outbound internet access.

Comprehensive Visualization and Reporting

Managed on Strata Cloud Manager for a single pane of glass experience.

• Detailed dashboard with trends filterable by users, data transfers, GenAI apps, and use cases.
• Comprehensive dictionary of over 500 GenAI apps and 60+ attributes for accurate discovery and monitoring.
• Context-aware LLM-powered data classification with over 300 classifiers for accurate sensitive data discovery.
• Support for persona-based access with role-based access controls.

Data Protection

Provides data protection, posture management, and zero trust security.

• Enterprise DLP: Cloud-based data loss prevention service using AI/ML. It is the detection engine for AI Access Security, blocking sensitive data exfiltration for file/nonfile traffic and text prompts.
• Uses DLP data patterns and data profiles to define sensitive data match criteria. Can use predefined or custom patterns (PII, source code, etc.).
• Threat Inspection: Inspects responses from sanctioned/tolerated GenAI apps for malicious content (files, URLs, code snippets).

What's Supported with AI Access Security?

AI Access Security gives you visibility into hundreds of generative AI (GenAI) apps grouped into predefined Use Cases .

Traffic for these apps is visible in the Activity Insights dashboard.

Enterprise Data Loss Prevention (E-DLP) powers sensitive data prevention for supported GenAI apps. Prerequisites for using Enterprise DLP with GenAI apps:

• All GenAI app support requires PAN-OS 10.2.3 or later (NGFW, Panorama, Prisma Access dataplane).
• All GenAI apps support only nonfile inspection unless otherwise specified.

If E-DLP doesn't support a GenAI app, you can block access to it via policy rules if it's not sanctioned.

Use Cases

Safely adopt GenAI apps based on predefined use cases and associated risks.

• Audio Generators: Create audio from text/audio inputs. Risks: Copyright, Data Privacy (voice), Sensitive Data Exposure.
• Conversational Agent: Chatbots for tasks (text/file input). Risks: Malicious Prompting (data exfiltration), Sensitive Data Exposure, Insecure Plugin Configurations, Hallucinations/Bias.
• Code Assistants & Generators: Generate code snippets/suggestions. Risks: Security Vulnerabilities, Intellectual Property Violations (copyrighted code), Sensitive Data Exposure (proprietary algorithms).
• Developer Platforms: Streamline GenAI app building. Risks: Exposure of Sensitive Information (training with proprietary data).
• Enterprise Searches: Centralized search across organizational data. Risks: Data Privacy/Security (access to sensitive data), Malicious Prompting.
• Image Editor & Generators: Generate/manipulate images from text/image input. Risks: Copyright Infringement, Deepfake Misuse, Bias/Ethical Concerns.
• Meeting Assistants: Summarize meetings, generate action items. Risks: Privacy/Confidentiality Breaches (training on sensitive meeting data).
• Productivity Assistants: Task assistance in productivity tools. Risks: Data Privacy/Security (access to broad sensitive data), Excessive Agency (plugin risks), Malicious Prompting.
• Video Editors & Generators: Generate/manipulate videos from text/image input. Risks: Copyright Infringement, Deepfake Misuse, Bias/Ethical Concerns.
• Writing Assistants: Writing suggestions, grammar, content generation. Risks: Plagiarism/Copyright Infringement, Exposure of Sensitive Information, Bias/Ethical Concerns.

SaaS Security Integration

SaaS Security (Inline, Data Security, SSPM) provides an integrated CASB solution.

• Data Security: Visibility and control of data-at-rest in sanctioned SaaS apps like ChatGPT Enterprise. View sensitive assets in the Activity Insights dashboard or Data Security > Data Assets, filtering by Sensitive Asset and Application.
• SaaS Security Inline: Visibility into GenAI Apps traffic . Review GenAI apps and attributes in the Application Dictionary, filtering by "GenAI Applications".
• SaaS Security Posture Management (SSPM): Visibility into third-party GenAI plugins from app marketplaces. View in the Plugins widget or SSPM > 3rd Party Plugins, filtering by "GenAI Applications".

AI Access Security Setup Prerequisites

Review the minimum PAN-OS and Prisma Access dataplane versions, and additional services required.

Functionality depends on licenses and PAN-OS/dataplane versions. Refer to the AI Access Security Licenses section for more details on included functionality.

NGFW and Prisma Access (Managed by Panorama)

Prerequisites when managed by Panorama.

NGFW and Prisma Access (Managed by Strata Cloud Manager)

Prerequisites when managed by Strata Cloud Manager.

AI Access Security Licenses

AI Access Security can be used with NGFW and Prisma Access , managed by Panorama or Strata Cloud Manager .

Requires one of the following licenses: AI Access Security , CASB-PA , or CASB-X .

AI Access Security License

A standalone license with three types:

• AI Access Security EVAL: Evaluation license. Must convert to production after evaluation to continue.
• AI Access Security LAB: For lab environments only. Not intended for production.
• AI Access Security: Production license.

CASB-PA and CASB-X

AI Access Security is included by default with CASB-PA and CASB-X licenses. No additional action needed for activation if CASB-PA or CASB-X is active.

What's Included with an AI Access Security License?

Included functionality depends on other active licenses and the PAN-OS/dataplane version (refer to Setup Prerequisites ).

AI Access Security only

When only the AI Access Security license is active (on NGFW/Prisma Access managed by Panorama or Strata Cloud Manager).

AI Access Security and Enterprise DLP Licenses

When both AI Access Security and Enterprise DLP licenses are active (on NGFW/Prisma Access managed by Panorama or Strata Cloud Manager).

CASB-PA and CASB-X Licenses

When CASB-PA or CASB-X licenses are active (on NGFW/Prisma Access managed by Strata Cloud Manager). Note: Functionality is the same across listed versions.

Activate the AI Access Security License

Activate your AI Access Security license using a magic link from Palo Alto Networks after purchase.

AI Access Security is included automatically when you activate a CASB-PA or CASB-X license.

These procedures assume you have license auth codes and magic links, and that prerequisites are met (minimum PAN-OS, management setup, E-DLP setup).

New Deployments (Prerequisites)

Steps required before activating the AI Access Security license on a new deployment:

1. Install and perform initial configuration for your NGFW , including activating support licenses.
2. Set up management for your NGFW or Prisma Access tenant (Panorama or Strata Cloud Manager). This involves:
   • Setting up Panorama (M-Series or Virtual Appliance).
   • Deploying Strata Logging Service .
   • Registering Panorama and activating Panorama support/management licenses.
   • Adding managed firewalls to Panorama.
   • Upgrading Panorama and NGFW to minimum PAN-OS versions.
   • Installing Cloud Services plugin on Panorama (for Prisma Access).
   • Setting up Panorama Managed Prisma Access (for Prisma Access).
   • OR Activating AIOps for NGFW Premium license (for Strata Cloud Manager managed NGFW).
   • OR Activating Prisma Access license on Strata Cloud Manager (for Strata Cloud Manager managed Prisma Access).
   • Onboarding NGFW to Strata Cloud Manager (if applicable).
   • Installing latest dynamic content updates and upgrading NGFW to minimum PAN-OS (if SCM managed).
   • Setting up Prisma Access (if SCM managed).
3. Set up Enterprise Data Loss Prevention (E-DLP) . This involves:
   • Installing the E-DLP plugin (Panorama) or Enabling E-DLP (SCM).
   • Editing E-DLP cloud content, data filtering, and snippet settings.
   • Reviewing supported advanced detection methods.
   • Creating data patterns and data profiles (recommend advanced profiles).
   • Modifying the DLP Rule (Strata Cloud Manager only).

Activation Steps (New or Existing Deployments)

Procedure after prerequisites are met:

1. Click the magic link provided by Palo Alto Networks.
2. Click Activate Subscription .
3. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address . It must match the email that received the link.
   • If no valid CSP account exists for the email, you can Create a New Account . This new account gets a Multitenant Superuser role and is associated with the tenant.
4. ( Multitenancy only ) Select the Customer Support Account.
5. ( Multitenancy only ) Select the tenant service group (TSG) for activation (parent or child tenant). Activation is for the selected tenant *only*.
6. Review the tenant Region (pre-populated and cannot be changed).
7. In the Assign Licenses section, click Done . Verify AI Access Security License is Fully Assigned .
8. Verify your Data Loss Prevention instance is selected if E-DLP is already active.
   • Gotcha: E-DLP is *not* required for AI Access Security activation itself. If E-DLP isn't active, one is created during activation. If you don't renew the AI Access Security license, E-DLP is no longer accessible and traffic isn't forwarded for inspection.
9. Agree to the Terms and Conditions.
10. Activate .

You are redirected to the Tenant Management page. The AI Access Security Activation Status starts Initializing . It displays as Data Security with a serial number starting with AIX . Proceed after status is Complete .

11. ( NGFW only ) Associate the AI Access Security license with your NGFW in Strata Cloud Manager (Settings > Device Associations > Associate Apps > Data Security > Select NGFW > Save). This is required for NGFW activation.
12. Verify activation in CSP (Products > Assets > Select NGFW or Prisma Access tenant > Licenses & Subscriptions). Verify the AI Access Security license is active.

13. Get Started with AI Access Security.

Convert an AI Access Security Evaluation License to a Production License

If you have the AI Access Security EVAL license active, you must convert it to production to continue safely controlling access and adopting GenAI apps after the evaluation period ends.

If you don't convert:

• Traffic containing sensitive data is no longer forwarded to Enterprise DLP for inspection/verdict.
• Enterprise DLP is no longer accessible (via Panorama or Strata Cloud Manager).
• Web Security and Security policy rules created for AI Access Security are preserved .

Procedure:

1. Log in to Strata Cloud Manager .
2. In the SCM menu (bottom-left), select Settings > Subscriptions .

3. Find the AI Access Security evaluation license and select Actions > Eval to Prod Request .
4. Specify the production license terms:
   • License Quantity: Number of individuals using AI Access Security.
   • Term: Length of subscription.
   The request is reviewed by your Palo Alto Networks account representative to create a quote.
5. Send Request .

Renew an AI Access Security License

You must manually renew your expiring AI Access Security license to continue using it. It does not automatically renew .

If the AI Access Security license expires:

• Traffic containing sensitive data is no longer forwarded to Enterprise DLP for inspection/verdict.
• Enterprise DLP is no longer accessible (via Panorama or Strata Cloud Manager).
• Web Security and Security policy rules created for AI Access Security are preserved .

Procedure:

1. Contact your Palo Alto Networks sales representative to request a renewal.
2. Log in to Strata Cloud Manager .
3. From the bottom-left menu, select Settings > Tenants .

4. Select the tenant for which you're renewing the license (parent or child). Tenants requiring immediate action are marked with a blue circle.
5. Edit the tenant licenses.
6. Agree to the terms and conditions and Activate Now (after the renewal is processed by PANW).

Perform Initial AI Access Security Configuration

An initial configuration is required after license activation.

This procedure assumes the AI Access Security license is already activated .

Initial Configuration Steps:

1. Set up and configure Enterprise Data Loss Prevention (E-DLP) .
   • E-DLP is the detection engine. You must associate a data profile with a Security policy rule.
   • Steps include: Installing/Enabling E-DLP (based on management), editing settings, reviewing advanced detection methods, creating data patterns and data profiles (advanced profiles recommended), and modifying the DLP Rule (Strata Cloud Manager only).
2. Enable Role Based Access to define administrator access privileges (for AI Access Security, E-DLP, and the management interface).
3. Enable the Gen-AI-Best-Practice Snippet .
   • Provides a starting point with preconfigured Security policy rules based on best practices.
   • Quickly allows Sanctioned apps and blocks many risky ones by default.
   • Associated with the Global folder by default but can be reassigned.
4. Associate the Application-Tagging Snippet .
   • Required for tag-based policy rule enforcement .
   • Contains info on which apps are tagged Sanctioned or Tolerated (otherwise Unsanctioned).
   • Tags are read from this snippet for UI display and policy enforcement.
5. Create a Vulnerability Protection profile .
   • Associated with Security policy rules to stop attempts to exploit system flaws.
6. ( NGFW only ) Create an internal trust zone and an outbound untrusted zone.
   • Zones logically group interfaces. Policy rules use zones (source/destination) for traffic control.
7. Create application filters to dynamically group GenAI apps for consistent policy application (predefined filters based on use case are included).
8. Create Custom Security policy rules to refine control beyond the best-practice snippet.

Enable Role Based Access to AI Access Security

Configure role-based access by assigning a predefined role to security administrators. These roles define read/write privileges for AI Access Security.

Roles and Permissions details other privileges.

Gotcha: Custom roles are not supported specifically for granting access privileges within the AI Access Security features/UI itself, although they are used for other Panorama/SCM functions.

Procedure (Managed by Panorama or Strata Cloud Manager):

1. Configure a Panorama administrator account and admin role ( account and role ) (Panorama only) OR Onboard the NGFW to Strata Cloud Manager and configure Strata Cloud Manager user roles (Strata Cloud Manager only) . This step grants access to the management interface itself.
2. Enable role-based access for Enterprise Data Loss Prevention (E-DLP) . This step defines privileges for configuring E-DLP patterns/profiles. Skip if already done or not needed for this user.
3. Assign role-based access for AI Access Security in Common Services Identity and Access Access Management:
   1. Select User , enter the Identity Address (email).
   2. For Apps & Services , select AI Access Security .
   3. Select a predefined Common Services Role from the table above.
4. Submit .

Enable the Gen-AI-Best-Practice Snippet

Activating AI Access Security grants access to the predefined Gen-AI-Best-Practice snippet .

This snippet provides a starting point for Security policy rules using best practices for GenAI app adoption. It allows access to Sanctioned GenAI apps and blocks many potentially risky ones by default, enabling productivity while maintaining control.

It's associated with the default Global configuration folder by default but can be reassigned.

The snippet includes two key Security policy rules:

• Sanctioned GenAI Access:
  • Allows access to apps tagged as Sanctioned .
  • Part of the pre-rule rulebase (takes precedence over deployment-specific/post-rules).
  • Disabled by default. You must manually enable it.
  • Applies the predefined Sanctioned GenAI Apps application filter.
  • Applies to any source/destination/user by default.
• Default GenAI App Access:
  • Blocks access to apps not classified as Sanctioned or Tolerated , or any GenAI not explicitly allowed by higher priority rules.
  • Part of the post-rule rulebase (evaluated after pre-rules and deployment-specific rules).
  • Disabled by default. You must manually enable it.
  • Applies the predefined GenAI Apps application filter (includes all GenAI apps).
  • Applies to any source/destination/user by default.

Procedure to enable the rules:

1. Log in to Strata Cloud Manager .
2. Select Manage > Configuration > NGFW and Prisma Access > Security Services > Security Policy > Internet Security .
3. Toggle the State column to enable (blue) for both the Sanctioned GenAI Access and Default GenAI App Access policy rules.
4. ( Optional ) Create and apply Security Profiles (like a DLP rule ) to the Sanctioned GenAI Access policy rule to prevent sensitive data exfiltration for allowed apps. Use Recommendations to identify gaps.

Associate the Application-Tagging Snippet

The predefined Application-Tagging snippet in Strata Cloud Manager is required for tag-based policy rule enforcement .

It contains tagging information (Sanctioned, Tolerated, Unsanctioned) for GenAI apps. Tags are written to and read from this snippet for display in the UI (AI Access Security, Activity Insights, Command Center) and for policy evaluation.

Re-tagging apps (based on risk, etc.) updates this snippet. Pushing configuration applies these new tags to the NGFW/Prisma Access deployment, affecting tag-based rules.

To push tags, the snippet must be associated with the appropriate scope(s). Associate the snippet ONLY with NGFWs or Prisma Access deployments that have App-ID Cloud Engine (ACE) enabled .

Procedure:

1. Log in to Strata Cloud Manager .
2. ( Important if you tagged apps before Sept 2024 update ) Remove existing Sanctioned and Tolerated app tags from all Configuration Scopes *other than* the Application-Tagging snippet scope .
   • Navigate to Manage > Configuration > NGFW and Prisma Access > Objects > Application > Applications .
   • Change Configuration Scope to where you previously managed tags.
   • Select tagged apps (use filters).
   • Remove Tag (removes admin-added tags, not predefined ones).
   • Repeat for all relevant scopes.

   Gotcha: Old tags outside the Application-Tagging snippet scope can still affect policy enforcement based on evaluation order, leading to unexpected behavior. Remove them to ensure the snippet's tags are authoritative.

3. Select Manage > Configuration > NGFW and Prisma Access > Overview .
4. Select Configuration Scope > Snippets > Application-Tagging .
5. In the Snippet Associations area, click the settings gear icon.
6. Select the scopes to associate with the Application-Tagging snippet. Ensure selected scopes have ACE enabled .

If you tag apps from the Applications page in Strata Cloud Manager ( Manage > Configuration > NGFW and Prisma Access > Objects > Application > Applications ), make sure the Configuration Scope is set to the Application-Tagging snippet .

Tagging to the Application-Tagging scope is important:

• Tags displayed in UI (AI Access Security, Activity Insights, Command Center) are read from this snippet. Tagging elsewhere leads to UI/Policy inconsistency.
• Tag-based policy enforcement uses an evaluation order. Tagging in multiple scopes can cause unexpected policy behavior.

AI Access Security Quiz