ChatGPT Access

[Sanjay_Ramaiah]

Hi Team,

Users are trying to access ChatGPT and getting error, but we have allowed teh ChatGPT APP-ID and still the same. Not even seeing any error at all. What is the best way to fix it?

Regards,

Sanjay S

[BPry]

@Sanjay_Ramaiah,

Ensure that you've enabled some form of logging for denied interzone traffic. You can do this by enabling logging on the interzone-default entry, or building an entry yourself and setting it to deny anything not already caught by your rulebase. That'll account for any traffic that's getting dropped due to something missing in your rulebase.

Outside of that, ensure that you review all of your logs as well. OpenAI recently added a new domain that is/was still classified as newly-registered-domain, so you could be preventing access to that domain depending on how you've configured your URL profiles and your anti-spyware profile and verify how your DNS Policy options look like for the same newly registered domains entry. 

[Sanjay_Ramaiah]

Thank you @BPry  We have configured the new domain to be dropped as Sinkhole. So may be that could be the cause.

May i know which is the new domain so that will add that in the DNS exemption.

Regards,

Sanjay S

[BPry]

@Sanjay_Ramaiah,

cdn.oaistatic.com is the last one that was added. 

[Sanjay_Ramaiah]

@BPry Thank you for the help. Looks like Palo public IPs are being blocked by ChatGPT and hence it was not working. When we did traffic steering it worked. Looks like Palo already raised ticket with ChatGPT and awaiting response on whitelisting Palo ranges.