Block with paloalto the access to my internal network users to any page related to artificial intelligence

[Alpalo]

Hello,

How can I block with paloalto the access to my internal network users to any page related to artificial intelligence?

Thanks

[BPry]

@Alpalo,

Is this technically doable, yes, is it viable unless your whitelisting resources individually, no. As long as you're decrypting traffic you can create an application filter that targets the subcategory 'artificial-intelligence' and block Bard, Bing-AI, and OpenAI signatures at the moment and it'll automatically adjust as more app-ids are pushed out that meet that filter.

You won't be able to block every resource related to artificial intelligence unless you start manually whitelisting resources and controlling external access with an iron fist. Until/Unless PAN releases a URL category specific to AI the only thing you can do at the moment is build the application filter and block access to those app-ids and manually block URLs when they are identified as working. This is a best-effort sort of deal. 

[PavelK]

Hello @Alpalo

last week, Palo Alto has announced release of new URL Category for AI: https://live.paloaltonetworks.com/t5/blogs/new-advanced-url-filtering-category-artificial-intelligen... Starting from 14th July 2023, you can use this new URL category for blocking.

Kind Regards

Pavel