BerriAI/litellm · error · HTTPException
panw_prisma_airs_scan_failed
panw_prisma_airs_scan_failed
Error message
Security scan failed - request blocked for safety
What it means
Error "Security scan failed - request blocked for safety" thrown in BerriAI/litellm.
Source
Thrown at litellm/proxy/guardrails/guardrail_hooks/panw_prisma_airs/panw_prisma_airs.py:755
"""Handle API errors with fail-open/fail-closed logic."""
end_time: Final = datetime.now()
duration: Final = (end_time - start_time).total_seconds()
category: Final = scan_result.get("category", "api_error")
self.add_standard_logging_guardrail_information_to_request_data(
guardrail_provider=self._PROVIDER_NAME,
guardrail_json_response=scan_result,
request_data=data,
guardrail_status="guardrail_failed_to_respond",
start_time=start_time.timestamp(),
end_time=end_time.timestamp(),
duration=duration,
event_type=event_type,
)
if scan_result.get("_always_block"):
is_config: Final = category == "config_error"
raise HTTPException(
status_code=500,
detail={
"error": {
"message": (
"Security scan failed - configuration error"
if is_config
else "Security scan failed - request blocked for safety"
),
"type": ("guardrail_config_error" if is_config else "guardrail_scan_error"),
"code": ("panw_prisma_airs_config_error" if is_config else "panw_prisma_airs_scan_failed"),
"guardrail": self.guardrail_name,
"category": category,
}
},
)
if scan_result.get("_is_transient") and self.fallback_on_error == "allow":
verbose_proxy_logger.warning(View on GitHub (pinned to 77b7c6c40c)
Solutions
- Modify the request content that the AIRS scan flagged as unsafe.
- Review the AIRS security profile rules to confirm the blocked categories are intended.
When it happens
Trigger: Thrown at litellm/proxy/guardrails/guardrail_hooks/panw_prisma_airs/panw_prisma_airs.py:755 when the library encounters an invalid state.
Common situations: See trigger scenarios.
AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18).
Data as JSON: /api/errors/42d9d0a8c7d37f58.
Report an issue: GitHub.