New Advanced URL Filtering Granular Artificial Intelligence Categories

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
L3 Networker

New Advanced URL Filtering Granular Artificial Intelligence Categories

 

 

To better support the diverse and evolving nature of GenAI applications across websites, Palo Alto Networks Advanced URL Filtering is introducing NEW AI sub-categories for enhanced granular control and visibility:

 

AI-code-assistant 

AI-conversational-assistant
AI-writing-assistant
AI-media-service

AI-data-and-workflow-optimizer

AI-platform-service

AI-meeting-assistant 

AI-website-generator 

 

This enhancement empowers customers to precisely control AI-powered tools and services, tailor AI adoption to specific departmental needs and make informed policy decisions for safe and efficient adoption of AI applications. 

 

Note:  All URLs included in these granular AI sub-categories are also part of the original "Artificial Intelligence" category.   

This allows customers to continue using the broader 'Artificial Intelligence' category to apply policies across all of these AI sub-categories collectively as a group, or take advantage of the new granular control options via these AI sub-categories without compromising their existing security posture.

 

ACTION REQUIRED: 

No action is needed if you wish to continue using the broader "Artificial Intelligence" category, as all URLs within these granular AI sub-categories are also included in the original "Artificial Intelligence" category

 

If you would like to take advantage of the granular AI sub-categories, note the following:

 

  • By default, the granular AI sub-categories actions are set to “Alert” only for the default profile. 
  • If you have multiple URL Filtering profiles, we recommend reviewing and adjusting the default action for these granular AI sub- categories within each profile.
  • We also recommend reviewing and updating the defined action for the broader "Artificial Intelligence" category. This is important because all URLs included in the granular AI sub-categories are also part of the broader "Artificial Intelligence" category and policy actions are applied based on action severity
  • This applies to all versions of PAN-OS software.

 

How are these granular Artificial Intelligence categories defined?

Palo Alto Networks defines these eight different granular AI categories as follows:

 

  1. AI-code-assistant

Sites that provide services to assist with code writing, optimization, and generation using artificial intelligence. This may include platforms that support code completion, bug detection, and code suggestions. 

 

  1. AI-conversational-assistant

AI-driven conversational assistants that utilize natural language processing (NLP) and machine learning to facilitate human-like interactions. These assistants are designed to support a wide range of tasks through conversational interfaces, typically accepting text and files as input and are designed to provide contextual, interactive support.

 

  1. AI-writing-assistant

Sites that leverage artificial intelligence and machine learning to enhance productivity by providing text based content generation capabilities across industries such as marketing, eCommerce, SEO, and education. These platforms improve efficiency and streamline tasks like SEO-optimized writing, customer service and prompt generation, while also supporting a broad range of content creation needs from creative writing and academic assistance to marketing and customer review management. Language translation services are not part of this category; such sites are covered under the ‘Translation’ category.

 

  1. AI-media-service

Sites that utilize artificial intelligence and machine learning to generate, manipulate, edit, and detect various forms of AI generated media, including images, voice, music, videos, ads, QR codes, AI headshots, and AI avatars, based on text prompts or input images. Sites that use GenAI to generate adult content, including images and videos, will not be categorized under AI-media. Instead, they are covered under the ‘Adult’ category. 

 

  1. AI-data-and-workflow-optimizer

Data optimization sites that utilize artificial intelligence to provide functionalities such as automated data cleaning, transformation, and analysis, as well as streamlining and managing repetitive workflow tasks to improve efficiency and productivity. 

 

  1. AI-platform-service

Sites that provide comprehensive tools and services for GenAI application development, including chatbot creation, model training, deployment, and optimization, as well as access to pre-trained models and code libraries. These platforms streamline the development process, facilitate collaboration, and enable developers to focus on core application logic without managing infrastructure or building models from scratch. 

 

  1. AI-meeting-assistant

Sites that leverage artificial intelligence to provide meeting assistance services, including summarizing key points, highlighting action items, and generating follow-up task lists. 

 

  1. AI-website-generator

Sites that leverage artificial intelligence for creating websites based on user input and preferences include generating content, layout design, and building code for the websites. The category doesn't include sites that lack AI functionalities and rely solely on pre-built templates or manual design tools. 

 

What is the use case of these granular Artificial Intelligence categories? 

The granular Artificial Intelligence categories enable organizations to create precise and tailored policies for managing different generative AI tools and services. 

 

Having granular Artificial Intelligence categories allows you to create tailored policies with more flexible actions based on your company's requirements and needs.

 

This approach empowers organizations to safely and effectively adopt AI, balancing innovation with robust security measures and reducing risk exposure through informed policy decisions.

 

Will the granular Artificial Intelligence categories be visible across all versions of PAN-OS?

Yes, these new granular AI categories will be visible on all supported PAN-OS software versions. However, they will be functional only on firewalls running PAN-OS 9.0 or a later version.

 

When will these granular Artificial Intelligence categories be available?

These granular Artificial Intelligence categories will be visible on the administrator management console after you install the content release scheduled for December 17th, 2024 (or a later version).  However, we will not begin publishing URLs to these new categories until March 20, 2025. 

 

What is the recommended action for these granular Artificial Intelligence categories?

Palo Alto Networks recommends the following action for each of these granular Artificial Intelligence categories:

 

Category Name

Recommended Action

AI-code-assistant 

Block

AI-conversational-assistant

Block

AI-writing-assistant

Block

AI-media-service

Alert

AI-data-and-workflow-optimizer

Block

AI-platform-service

Block 

AI-meeting-assistant

Block

AI-website-generator

Alert

 

Note

The granular Artificial Intelligence categories actions are set to “Alert” only for the default profile. If you have multiple URL Filtering security profiles, an administrator must take action to update the default action for these categories within each profile. This configuration applies to all versions of PAN-OS software.  

 

Are all URLs in the granular Artificial Intelligence categories also included in the original 'Artificial Intelligence' category?

Yes, all URLs part of granular AI categories are also included in the original 'Artificial Intelligence' category.  This allows customers to continue using the broader 'Artificial Intelligence' category to apply policies across all of these granular AI categories as a group, offering the flexibility to retain the original approach or leverage the new granular control options without impacting the existing security posture.

 

How are sites that generate adult content using GenAI categorized?

Sites that use Artificial Intelligence to generate adult content, including images and videos, are not categorized under 'AI-media-service.' Instead, they are included in the 'Adult' category. 

 

Would the granular 'AI-media-service' category include the detection of AI-generated content, such as AI-generated images, audios, videos and AI-generated text recognition?

The ‘AI-media-service’ category covers the detection of all AI-generated media content, such as images, videos, and audio. However, the detection of AI-generated text and written content falls under the scope of the ‘AI-writing-assistant’ category.

 

How does Palo Alto Networks Advanced URL Filtering solution select a granular Artificial Intelligence category when multiple types of AI services are offered on a site?

When a site offers multiple AI services, Palo Alto Networks' URL Filtering selects the category that best matches the most prominent service on the page based on the page's content. If no single service stands out, the categorization is based on the severity of the granular AI categories. For example, the "AI-conversational-assistant" category takes priority over the ‘AI-media-service’ category.

 

What is the Palo Alto Networks test URL for these granular Artificial Intelligence categories?

The test URL for these categories are: 

 

http://urlfiltering.paloaltonetworks.com/test-ai-code-assistant
http://urlfiltering.paloaltonetworks.com/test-ai-conversational-assistant
http://urlfiltering.paloaltonetworks.com/test-ai-writing-assistant
http://urlfiltering.paloaltonetworks.com/test-ai-media-service
http://urlfiltering.paloaltonetworks.com/test-ai-data-and-workflow-optimizer
http://urlfiltering.paloaltonetworks.com/test-ai-platform-service
http://urlfiltering.paloaltonetworks.com/test-ai-meeting-assistant
http://urlfiltering.paloaltonetworks.com/test-ai-website-generator

 

Additional Information

For more information on best practices when managing Advanced URL Filtering categories, please read our:

 

URL Filtering Category Recommendations 

Complete List of PAN-DB URL Filtering Categories

 

2 Comments
L2 Linker

Suppose if we put the Granular AI category to Block and the "Broader" AI category is set to Alert. As both the Granular and Broader AI category will identify the URL ,will the Granular category take precedence? 

L4 Transporter

@UmerSalahuddin It's my understanding that the more restrictive match will always take precedence.  So, if it matches both categories then in your example it would block.

  • 43629 Views
  • 2 comments
  • 0 Likes
Register or Sign-in
Labels