The

AI Access Security

Insights dashboard displays GenAI application usage on your network by use case by default as well as the following high-level information about your top GenAI use cases:

The use case details page provides granular data about the GenAI app usage. You can use this information to understand GenAI app usage to help inform you of what policy rules your security administrators need to write to strengthen your security posture. This ensures that your organization is safely adopting GenAI apps and to prevent exfiltration of sensitive data.

In the example above,

Openai-Base

is the most used GenAI app in the

Code Assistant & Generator

use case. Additionally, this is an

Unsanctioned

application and indicates this an application not approved for use on your corporate network.

In this case, you can modify the default GenAI access policy rule to explicitly block all access to

OpenAI

if this is an application your organization should not access.

Some important information to review is:

For example, based on your investigation you discover that there are multiple unsanctioned GenAI apps with a large volume of data usage. This poses a security risk because there are users accessing an unapproved app on the network and you don't know what data is being downloaded or uploaded. Until you can perform proper due diligence to understand the GenAI app purpose and who is permitted to use the GenAI app, you can

Block

the GenAI app for all users.

Conversely, you notice there are some

Unsanctioned

GenAI apps listed that but they are GenAI apps approved for use on your network by specific users with a large volume of data usage. In this case, you can change the tag to

Sanctioned

and write a policy rule to

Allow

usage of the application but only for users in specific roles or departments. In the policy rule you can associate an

Enterprise Data Loss Prevention (E-DLP)

data profile to prevent exfiltration of sensitive data and a Vulnerability profile to stop attempts to exploit system flaws or gain unauthorized access to systems.

This displays the top GenAI apps that risky users accessed to help narrow your focus.

The

AI Access Security

Insights dashboard displays the GenAI application accessed on your network by use case by default and displays the following high-level information about your top GenAI app users. Click on the user count o view the

User Name

or

IP Address

and the number of GenAI

Applications

that user accessed.

For example, based on your investigation you discover that a large number of users are accessing the

bing-ai-uploading

GenAI app. While this is a

Sanctioned

GenAI, it's only sanctioned for a specific set of users within your organization. You can decide to write a policy rule to explicitly block access to users which shouldn't have access to this GenAI app to prevent misuse and a Security policy rule to explicitly allow access to users who are approved to access the GenAI app. Alternatively, you can write a policy rule to allow access for all users but implement data loss and threat prevention measures to prevent exfiltration of sensitive data and prevent threats such as malicious and phishing URLs, malicious files, or malware.