09-08-2026 07:43 AM
Looking for recommendations or best practice items for monitoring/searching for AI usage through on-premise NGFWs. Standard app-id/URL classifications already being used, but is there anything else that might help or make things more visibile?
09-10-2026 04:49 AM
Hi @ChrisShopp ,
The biggest blind spot with monitoring AI traffic is encryption. Standard App-ID and URL filtering will catch the initial domain handshake, but since almost every AI provider uses HTTPS, all the payload details are hidden inside the encrypted tunnel.
To see prompt contents, API payloads, or file transfers, you’ll need to set up SSL Decryption. Once decrypted, you can layer on tools like Enterprise DLP to alert on or block sensitive data moving into those tools.
Best,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
