Manage AI Services via SWG On-Prem

Configure a Web Policy

Skyhigh Secure Web Gateway (On-Prem) allows you to configure a web policy to control the usage of AI services within your organization. Follow the steps below to configure your web policy:

► Step 1: Create a List of AI Services

You can create a list of AI services based on Skyhigh's recommended list (AI-ML Domains). This list will be used to define the criteria for rules in your web policy.

To create a list of AI services:

1. Log in to Skyhigh Secure Web Gateway (On-Prem) using admin credentials.
2. Go to Policy > Lists > Strings.
3. Under Lists, select Strings, and click +.
   
4. On the Add List tab, name the list and describe its source:
   • Name. Enter a descriptive name for the list.
   • List Content is managed remotely. Select this check box if the list of AI services is managed remotely.
   • Source. Select Skyhigh Supplied List (or McAfee Supplied List) as the source for the list of AI services, and click Choose.
     
5. In the Choose List Content dialog, under Application URL Lists, select AI-ML Domains.
   

NOTES

• If the Skyhigh recommended list (AI-ML Domains) is not available for selection, you must update your appliances.
• To update your appliances, go to Configuration > Appliances, select the appliance by its name, and then click Update Engines > Trigger Update.

5. Click OK > OK.
6. Click Save Changes.

You can view the newly created list of AI services under Lists in your web policy.

► Step 2: Create a Rule Set

After creating the list of AI services, you must create a rule set for AI services. You can then add rules to the newly created rule set.

To create a rule set:

1. In Skyhigh Secure Web Gateway (On-Prem), go to Policy > Rule Sets.
2. Click Add > Rule Set.
   
3. On the Rule Set tab, name the rule set and describe its status and scope:
   • Name. Enter a descriptive name to help identify the rule set.
   • Applies to. Make sure that Responses and Embedded Objects are not selected for the rule set.
4. Click OK.
   

You can view the newly created rule set for AI services under Rule Sets in your web policy.

Add Rule to Rule Set

You can now add a rule to the newly created rule set and define the criteria based on which the rule is applied in your web policy.

1. In Skyhigh Secure Web Gateway (On-Prem), go to Policy > Rule Sets.
2. Under Rule Sets, select the newly created rule set, and click Add Rule.
    
3. In the Add Rule dialog, configure the following steps:
   1. Name. Enter a descriptive name to help identify the rule, and click Next.
      
   2. Rule Criteria. Configure the criteria for the rule that the web policy enforces. Click Add > Advanced criteria.
      
      • In the Add Criteria dialog, configure the following to set a condition for the rule that triggers a response if this condition matches:
        • Selected Property. Select the property as URL.Host to categorize AI services based on their hostname.
        • Selected Operator. Select the operator as is in list to build a condition. 
        • Compare with. Select the newly created list of AI services which is configured in Step 1. For example, select AI-related domains.
          
4. You must create another criteria to add the property as URL.Domain and repeat the steps mentioned in Rule Criteria.
5. Select the condition OR in the Rule Criteria step, and click Next.
   

3. Action. Select the response action that is triggered when the policy rule is matched. For example, select Block.​​​

7. Click Next.
8. Click Finish.
   
9. Click Save Changes.

Your web policy is now configured successfully to control the usage of AI services.