Palo Alto Networks and NVIDIA expand security controls for AI agents

Summary

Palo Alto Networks and NVIDIA are expanding an integration to control AI agents’ access to tools, data, and networks. Some components are available, while Vera CPU and Idira integrations are described as future or planned.

Key points

The collaboration spans agent activity, network traffic, and identity management through NVIDIA’s Open Agent Safety Platform reference design.
Prisma AIRS AI Gateway is planned for systems powered by NVIDIA Vera CPUs; it is intended to manage agent connections to models and tools, inspect interactions, restrict access, and track usage.
NVIDIA OpenShell is broadly available and runs agents in isolated environments with policies for access to files, networks, and other resources.
Prisma AIRS AI Runtime Security on NVIDIA BlueField DPUs is described as generally available and can enforce network policy separately from the host application.
NVIDIA DOCA Argus can monitor agent execution paths and tool calls, enforce access rules, and send telemetry to Cortex XSIAM for analysis and response.
A planned OpenShell and Idira integration would add identity and secrets management for agent sandboxes, reducing reliance on persistent credentials assigned to people.

Article Details

Event Type: Palo Alto Networks and NVIDIA expanded their collaboration to integrate AI-agent security controls with NVIDIA’s Open Agent Safety Platform reference design.
Impact: The integration is intended to let enterprises control AI agents’ access to tools, data, networks, and identities; inspect agent activity and network traffic; enforce policies; and support monitoring and response. Prisma AIRS AI Runtime Security on NVIDIA BlueField is described as generally available, while the Prisma AIRS AI Gateway deployment on NVIDIA Vera CPUs is part of a future architecture. An OpenShell–Idira integration is planned.

People

Anand OswalPalo Alto Networks’ EVP of AI and network security; quoted in the company’s announcement about controlling AI-agent activity.

Vendors

NvidiaPalo Alto Networks is expanding its collaboration with NVIDIA to give enterprises tighter control over what AI agents can access, use, and share.Palo Alto NetworksPalo Alto Networks is expanding its collaboration with NVIDIA to give enterprises tighter control over what AI agents can access, use, and share.

Products

BlueFieldThe integration spans agent activity, network traffic, and identity management through NVIDIA’s Open Agent Safety Platform reference design, including Prisma AIRS, BlueField, OpenShell, and Idira.Cortex XSIAMThe integration includes DOCA Argus, Cortex XSIAM, OpenShell, and Idira for monitoring, response, and identity management.Idira Privileged Access Management (PAM)The integration spans agent activity, network traffic, and identity management through NVIDIA’s Open Agent Safety Platform reference design, including Prisma AIRS, BlueField, OpenShell, and Idira.NVIDIA DOCA ArgusThe integration includes DOCA Argus, Cortex XSIAM, OpenShell, and Idira for monitoring, response, and identity management.NVIDIA Open Agent Safety PlatformPalo Alto Networks Securing Agents within NVIDIA Open Agent Safety Platform (Source: Palo Alto Networks)NVIDIA Vera CPUsPrisma AIRS AI Gateway will run on NVIDIA Vera CPUs in a future architecture.OpenShellThe integration spans agent activity, network traffic, and identity management through NVIDIA’s Open Agent Safety Platform reference design, including Prisma AIRS, BlueField, OpenShell, and Idira.Prisma AIRSThe integration spans agent activity, network traffic, and identity management through NVIDIA’s Open Agent Safety Platform reference design, including Prisma AIRS, BlueField, OpenShell, and Idira.