Real-time threat scanning with TSS Fast Scan

Prevent malware from reaching your AI models or users

AI Gateway 1.8 introduces TSS Fast Scan, a real-time threat-scanning engine built directly into the gateway to help protect fast-moving AI workflows. It inspects every file that transits AI Gateway for malicious content before it reaches your models or users, giving customers stronger malware protection with minimal added latency.

What this means to you	How it helps you
Scan files in real time	AI Gateway checks every file with TSS Fast Scan before it reaches your models or users, helping stop malicious content early.
Keep traffic moving safely	AI Gateway falls back gracefully if TSS is disabled or not installed, so requests do not hang.

AI Gateway now deploys on Azure

Deploy AI Gateway on Azure for secure, scalable AI access

With this release, Azure joins the list of supported deployment targets, giving Microsoft cloud teams a straightforward way to run AI Gateway where they already operate. Deploy AI Gateway as a virtual appliance on Azure and extend secure AI access across your cloud environment with a consistent setup experience.

Deployment flexibility

What you can do	How it helps you
Deploy AI Gateway on Azure	Run AI Gateway as a VM on Azure with the same setup experience you use for other supported environments.

Configure your appliance over HTTPS with the new Configuration API

Skip the console menus and configure your appliance with a REST call

Configuration API is a public HTTPS API that lets you configure an appliance without using the CLI menus. The API is disabled by default. To enable it, sign in to the appliance through SSH and run enable-api. This opens external port 8443 and creates an access token. You can then use the API to enroll the appliance, manage its TLS certificate, and configure DLP and AI Guardrails service connections.

Configuration API capabilities

What you can do	How it helps you
Enroll and bootstrap the appliance	Call the bootstrap endpoint to enroll the appliance and optionally include DLP and AI Guardrails configuration in the same request.
Manage the TLS certificate	Generate a CSR, install a signed certificate, and check certificate status over HTTPS instead of the console.
Configure DLP and AI Guardrails connections	Set, retrieve, or remove the DLP host and CA certificate, and configure the AI Guardrails host and OAuth settings via the API.

UX & Configuration Boosts

Choose your own certificate algorithm

RSA, ECDSA, or Ed25519 — generate the CSR your CA actually accepts

You can now choose the certificate algorithm and parameters directly in the CLI Certificate Management wizard. Generate CSRs with ECDSA, RSA, or Ed25519 so your internal CA can sign the right certificate faster and with fewer setup steps.

Certificate setup improvements

What you can do	How it helps you
Generate a CSR your CA can sign	Choose ECDSA, RSA, or Ed25519 in the CLI wizard and get the right certificate signed the first time.
Upload enterprise CA certificates cleanly	Add a CA certificate or self-signed leaf certificate directly. AI Gateway detects the certificate type and guides you with clear helper text.

Faster TLS troubleshooting with built-in OpenSSL checks

Diagnose TLS handshake issues without leaving the CLI

The diagnostics CLI now includes built-in openssl s_client checks, making TLS troubleshooting faster and more consistent. Run checks with or without SNI and inspect certificate chains for DLP (Data Loss Prevention) connections directly from the terminal, so you can identify handshake issues quickly and keep secure AI traffic moving.

TLS troubleshooting

What you can do	How it helps you
Run OpenSSL checks from the CLI	Diagnose TLS handshakes in seconds without leaving your terminal.
Test DLP connections with or without SNI	Inspect certificate chains quickly and keep secure AI traffic moving.

Customize your appliance upgrade window

Set your own upgrade schedule instead of a fixed default

AI Gateway 1.8 gives you control over appliance upgrades by letting you set a maintenance window for upgrades, from the Updates tab of the appliance’s Gateway Setup page. The Gateway Management Service (GMS) now supports configurable upgrade profiles so you can define a schedule that fits your operations instead of using a fixed default.

Upgrade window settings

Field	Supported values
Auto update to	Latest release (recommended) or Latest – 1 release — pick one (default: Latest release)
Frequency	Weekly (the supported cadence)
Day of the Week	Sunday–Saturday — pick one (default: Saturday)
Start Time	Hourly slots from 12 AM to 11 PM — pick one (default: 12 AM)
Time Zone	Choose a named time zone for any UTC offset (for example, Los Angeles UTC-08:00, London UTC+00:00, Taipei UTC+08:00)
Force Upgrade	Checkbox — allow emergency upgrades to run outside the scheduled window (enabled by default)

Pick the day, time, and time zone that match your low-traffic window, choose whether to run the newest build or hold one version back, and decide if emergency upgrades can still deploy immediately when needed.

AI Gateway Release Notes Version - 1.8

AI Gateway 1.8 adds real-time threat scanning to keep AI traffic fast, secure, and simple to manage.