Zscaler AI Guard

​

Using Zscaler AI Guard with Prisma AIRS AI Gateway

​

1. Add Zscaler Credentials to the AI Gateway

• Navigate to the Plugins page under Admin Settings
• Click on the edit button for the Zscaler AI Guard integration
• Add your Zscaler AI Guard API Key (the DAS Application Key generated from your Zscaler AI Guard tenant)

​

2. Add Zscaler AI Guard Check

• Navigate to the Guardrails page and click the Create button
• Search for “Zscaler AI Guard” and click Add
• Configure your guardrail settings:
  • Policy ID: The ID of the Zscaler Detections Policy to execute (Required)
  • Timeout: The timeout in milliseconds for the scan (Default: 10000)
• Set any actions you want on your check, and create the Guardrail!

​

3. Add Guardrail ID to a Config and Make Your Request

• When you save a Guardrail, you’ll get an associated Guardrail ID - add this ID to the input_guardrails or output_guardrails params in your AI Gateway Config
• Create these Configs in Strata Cloud Manager, save them, and get an associated Config ID to attach to your requests. More here.

{
  "input_guardrails": ["guardrails-id-xxx", "guardrails-id-yyy"],
  "output_guardrails": ["guardrails-id-xxx", "guardrails-id-yyy"]
}

curl https://aigw.portkey.ai/v1/chat/completions \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $OPENAI_API_KEY" \
  -H "x-portkey-api-key: $PORTKEY_API_KEY" \
  -H "x-portkey-config: $CONFIG_ID" \
  -d '{
    "model": "gpt-5.1-nano",
    "messages": [{
        "role": "user",
        "content": "Hello!"
      }]
  }'

const openai = new OpenAI({
  apiKey: "PORTKEY_API_KEY",
  baseURL: "https://aigw.portkey.ai/v1",
  defaultHeaders: { "x-portkey-config": "CONFIG_ID" }
});

client = OpenAI(
    api_key="PORTKEY_API_KEY",
    base_url="https://aigw.portkey.ai/v1",
    default_headers={"x-portkey-provider": "openai", "x-portkey-config": "CONFIG_ID"}
)