Modify Default GenAI App Access Policy Rule to Control GenAI Access

Log in to
Strata Cloud Manager
.
Select
Manage
Configuration
NGFW & Prisma Access
Security Services
Web Security
and select your target
Configure Scope
.
In the
Default GenAI App Access
section, click the predefined
Default GenAI app Access
policy rule.
This policy controls the access to GenAI applications.
Enable the Default GenAI App Access policy. It's disabled by default.
Select
GenAI App Access Policy
and open the configuration page.
In the
Blocked Web Applications
section, select
+
to add a specific Application Group, Applications, or a Custom Application Group to this list. Select
X
to delete existing GenAI applications from the list.
In the following example, you can see the default list of blocked GenAI applications like GenAI Conversational Chat, GenAI Image Editor Generator, and so on.
In the
Allowed Web Applications
section, select
Add
to add a specific Application Group, Applications, or a Custom Application Group to this list. Select
-
to delete existing GenAI applications from the list.
In the
Blocked URL Categories
section, select
+
to add specific URL categories, Multi-Category URLs, or Dynamic URL Lists that are malicious and high-risk URL categories. Select
X
to delete existing URLs from this list.
In the
Allowed URL Categories
section, select
+
to explicitly allow URL/custom categories in your enterprise. Select
X
to delete existing URL categories from this list.
You can't modify the name and description of the Default GenAI App Access policy.
Save
.
Push Config
and
Push
.